Subprocessors
Last updated 6 October 2026
Every company below processes data on our behalf, under a written agreement. This list is compiled from what the code actually sends, not from memory, and it is updated in the same change that adds or removes a provider. There is nothing else.
Current subprocessors
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database, authentication, file storage, background functions | Everything: account details, workspace content, uploaded files, server logs |
| Vercel | Hosting for the app and this website | Request logs, including IP address and browser user agent. No account content. |
| Resend | Sending email, including demo requests made on this website | Recipient name and email address, and the content of the message sent |
| Cloudflare | Bot check on the sign-in and sign-up form (Turnstile) | IP address and browser characteristics, at the moment the form is used. No account content. |
| Google Workspace | Our email inbox for keny.io addresses, such as privacy@keny.io | Messages you send to a keny.io address, and our replies. No workspace content. |
| Google, Microsoft or your company's identity provider | Optional sign-in, only if you choose it | The sign-in request. They confirm your identity to us; we send them no workspace data. |
| Anthropic | AI for Ask Keny, only in workspaces where it is switched on | The question typed into Ask Keny, and the names and dates of the brands, campaigns, beats, markets and owners it refers to. No email addresses, notes or uploaded files. |
What is deliberately absent
Keny loads no analytics, no session replay, no advertising and no remote fonts. There is no Google Fonts request, no tag manager and no third-party cookie anywhere in the product or on this site. If that ever changes, this page changes with it, in the same release.
Where processing happens
Our database, authentication and file storage run in the EU (Paris), with Supabase. The other providers operate globally. Transfers out of the UK or the EEA rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses.
Changes to this list
We will email workspace owners at least 30 days before adding a subprocessor, so there is time to object. To be told about changes, write to privacy@keny.io.
Data processing agreement
If your company needs a signed data processing agreement before using Keny, ask at privacy@keny.io and we will send one.