Last updated: October 22, 2026
Sub-processors
These are the companies GoodTaco uses to run its services that may process personal data. Each may use the data only to provide its service to us, under a written agreement with data protection terms.
| Company | What it does for GoodTaco | Data | Based in |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting for the apps you build, databases, file storage, and AI models through Amazon Bedrock | All customer data | United States |
| Railway Corporation | Hosting of GoodTaco’s application servers and databases | All customer data | United States |
| Cloudflare, Inc. | Content delivery, TLS, website hosting, Turnstile bot protection and Web Analytics | Traffic data, IP addresses, usage data | United States |
| Daytona Platforms, Inc. | Isolated workspaces where the AI assistant builds apps | App code and the content needed to build it | United States |
| Anthropic, PBC | AI models for the AI assistant | Prompts, app code and the content needed to answer | United States |
| Google LLC (Vertex AI) | AI models for the AI assistant | Prompts, app code and the content needed to answer | United States |
| Vercel, Inc. (AI Gateway) | Routing requests to AI model providers | Prompts, app code and the content needed to answer | United States |
| Google LLC | Google sign-in, Google Sheets and Gmail integrations; Google Analytics, Tag Manager and Ads on our website and app | Account details, connected sheets and email sending, usage and advertising data | United States |
| Stripe, Inc. | Payment processing and billing | Billing contact, payment details, purchases | United States |
| PostHog, Inc. | Product analytics, error tracking and session recording | Usage data, device data, session recordings | United States |
| Microsoft Corporation (Clarity) | Session recording | Usage data, device data, session recordings | United States |
| Crisp IM SAS | Support chat in the app | Name, email, chat messages | France |
| Customer.io (Peaberry Software, Inc.) | Emails, in-app messages and surveys | Name, email, account and usage details | United States |
| Dub Technologies, Inc. | Partner program referral tracking and partner payouts | Referral data; partners’ payout and tax details | United States |
Where data is processed
GoodTaco’s primary databases and file storage are in the United States. Some providers process data in other countries. Our privacy policy (section 8) explains the safeguards we rely on for those transfers.
Changes to this list
We’ll tell customers by email at least 30 days before we add or replace a sub-processor that handles customer data, and update this page. If you object on reasonable data protection grounds, email compliance@goodtaco.ai within that time, as our data processing addendum explains.
Services you connect
Integrations you choose to connect, such as Airtable, Jira, Smartsheet, Zendesk, Zoho CRM, QuickBooks Online, Supabase and QBench, aren’t our sub-processors. Your apps send data to them because you set them up to, under your own agreement with each provider.