Constellation Subprocessors
Effective Date: June 9, 2026
In Plain English
This page lists the third-party providers we use to help run Constellation. They support services like hosting, authentication, billing, analytics, messaging, AI-assisted features, and document processing. We review our vendors and update this list when our systems change.
Subprocessors
Last updated: June 9th, 2026
What is a subprocessor?
A subprocessor is a third-party company we use to help provide, secure, or support the Service. These providers may process personal information on our behalf.
Table of Contents
Categories of subprocessors
We may use subprocessors in the following categories:
- authentication
- hosting and infrastructure
- storage and backups
- email and messaging
- analytics
- error monitoring
- AI-assisted features
- payment processing
- document processing
- optional integrations
Current subprocessors
| Provider | Category | Purpose |
|---|---|---|
| Clerk | Authentication | Account sign-in, session management, and authentication |
| Stripe | Payments | Subscription billing and payment processing |
| Amazon Web Services (AWS) | Hosting and infrastructure | Hosting, storage, databases, backups, and cloud services |
| Amazon SES | Transactional email delivery | |
| Twilio SMS | Messaging | SMS-based notifications and MFA |
| Sentry | Error monitoring | Error reporting and application monitoring |
| PostHog | Analytics | Product analytics and feature usage measurement |
| OpenAI | AI-assisted features | AI-powered features, if enabled |
| Anthropic | AI-assisted features | AI-powered features, if enabled |
| Plaid | Optional integrations | Bank account linking, if enabled |
| AWS Textract | Document processing | OCR and text extraction from uploaded documents |
| Brandfetch | Optional integrations | Logo lookup, if used |
| Email account connection | Reading mailbox metadata to discover financial accounts, when a user connects a Gmail account (gmail.metadata scope — message bodies are never accessed) | |
| Microsoft | Email account connection | Reading mailbox metadata to discover financial accounts, when a user connects an Outlook account (Mail.ReadBasic scope — message bodies are never accessed) |
| Apple | Email account connection | Reading mailbox metadata via IMAP, when a user connects an iCloud account with an app-specific password |
| AWS Transcribe | Document processing | Speech-to-text for voice-recorded messages and notes |
| Cloudflare | Bot protection | Turnstile challenge on sign-up and sensitive forms |
| Postmark | Legacy transactional email delivery (being phased out in favour of Amazon SES) | |
| Clearbit | Optional integrations | Company logo lookup, alongside Brandfetch |
Updates
We may add, remove, or replace subprocessors over time as our Service changes.
Questions
If you have questions about subprocessors, contact us at privacy@myconstellationplan.com