Legal
Subprocessors
Last updated: September 22, 2026
HardLabs uses third-party providers to operate and deliver its Services.
The providers below may process Customer Personal Data depending on how a customer uses HardLabs.
| Provider | Purpose | Information Potentially Processed |
|---|---|---|
| Vercel Inc. | Application hosting, deployment, networking, compute | Application requests, technical metadata, logs, Customer Content processed through application infrastructure |
| Fly.io | Hosting of the HardLabs job-processing API | Uploaded Customer Content, job requests and results, technical metadata, logs |
| Cloudflare, Inc. — R2 | Object storage | Uploaded Customer Content, technical files, associated metadata |
| Supabase | Managed Postgres database | Account records (name, email address, sign-up and last sign-in times), job and organization index, waitlist and pilot sign-up records (email address, pseudonymous visitor identifier, country) |
| Clerk, Inc. | Authentication and user management | Name, email address, authentication information, account metadata, device/IP information |
| Formspree | Waitlist and pilot sign-up form processing | Email address, form type, referring page, approximate location, pseudonymous visitor identifier |
| Slack | Internal operational notifications to the HardLabs team | Email address and name of new sign-ups and accounts, approximate (city-level) location and time zone, device/browser type, pseudonymous visitor identifier, account and organization identifiers, project names and upload summaries |
| OpenAI | AI model inference and AI-assisted engineering functionality | Portions of Customer Content submitted for AI-assisted processing |
| Anthropic PBC | AI model inference and AI-assisted engineering functionality | Portions of Customer Content submitted for AI-assisted processing |
| Google LLC — Google Workspace | Business and support email | Contact information, communications, attachments, email metadata |
HardLabs also uses the following providers for analytics of the public hardlabs.io website:
| Provider | Purpose |
|---|---|
| Google LLC — Google Analytics | Website traffic and usage analytics |
| Microsoft Corporation — Microsoft Clarity | Website interaction analytics, heatmaps, session replay |
HardLabs does not intend to send proprietary Customer Content from authenticated engineering workflows to Google Analytics or Microsoft Clarity.
AI Providers
HardLabs uses commercial/API offerings from OpenAI and Anthropic.
HardLabs does not authorize Customer Content to be used for generalized model training unless the applicable customer expressly opts in.
Only information reasonably necessary to perform the requested AI-assisted operation should be transmitted to an AI provider.
Changes
HardLabs may add or replace providers as its infrastructure evolves.
Material Subprocessor changes will be handled in accordance with applicable customer agreements and the HardLabs DPA.
Questions or objections relating to subprocessors may be sent to: