Subprocessors
Last updated November 4, 2026
These companies process personal data on behalf of Accred Products, LLC to provide the Accred apps. We give at least 30 days’ notice before a new one starts processing personal data.
Current subprocessors
| Company | What they do for Accred | Location |
|---|---|---|
| Cloudflare, Inc. | Hosts Hub, the apps, and this site; network security, including the connection to the Connect relay; storage for Accred Protect backups and Assess evidence uploads; abuse-prevention counters and the optional Turnstile check for the setup assistant on this site. | Global network; storage in the United States |
| Supabase, Inc. | Databases, authentication, and file storage for the apps. Supabase Auth sends account emails, such as sign-in links. | United States |
| Stripe, Inc. | Payment processing for paid plans, migration licenses, and the expanded assessment. | United States |
| Microsoft Corporation (Microsoft Azure) | Temporary staging storage for files that Accred Migrate copies into SharePoint and OneDrive during a migration. | United States |
| DigitalOcean, LLC | Hosts the server that runs the Accred Connect relay, which Accred operates. Enrolled devices connect to the relay, and remote-support sessions (screen images and keyboard and mouse input) pass through it. Cloudflare carries the connection to it. | United States (New York) |
| OpenRouter, Inc. | Routes requests for AI features (Assess summaries, and the Consult assistant, which only Accred staff can use) to model providers, currently Anthropic, OpenAI, Google, and DeepSeek models. Only the text needed for that request is sent. | United States |
| Anthropic, PBC | Runs the AI model behind the setup assistant on this public site (accredproducts.com). Receives what a visitor types into the assistant and the earlier messages in that conversation; it receives no Customer Data from the apps. Deletes them within 30 days unless flagged for a usage policy violation, and does not train on them. | United States |
Notice of new subprocessors
We give at least 30 days’ notice before a new subprocessor starts processing personal data. We give it by updating this page and by emailing the Owners of every Accred organization. An organization may object on reasonable data protection grounds, as section 4 of the Data Processing Addendum describes.
- October 28, 2026: Microsoft Azure added, for temporary staging storage during Accred Migrate migrations, and Anthropic added, for the setup assistant on this site.
- November 2, 2026: DigitalOcean added, for the server that runs the Accred Connect relay. It has hosted the relay since October 30, 2026; it was listed here late.
Services you connect
Microsoft 365 (Microsoft Graph and Teams) and any AI provider accounts you link in Assess (Anthropic or OpenAI admin APIs) are services your organization chooses and controls. Accred reads from or sends to them only as you direct, using your consent or keys; they are not Accred subprocessors.