This document has not been reviewed by a lawyer and does not apply to anyone yet. Items marked (under legal review) are still being decided with our lawyer.
The service providers that process personal data for Tiercube, including those planned but not yet connected.
Last updated: DRAFT
These are the service providers that process personal data for Tiercube. Providers marked Planned are not connected yet and process no data today; they are listed so customers can review them before they start. We will update this page and notify account owners at least 30 days before a new subprocessor starts processing Customer Data (see section 7 of the DPA).
Subprocessors
| Provider | What it does for Tiercube | Data involved | Location | Status |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting of the application (Cloudflare Workers), the database (Cloudflare D1), error logs and network security | All data stored on our servers: accounts, company data, catalog, plans, audit and usage records; network requests | United States; global network. Database region: Eastern North America (ENAM) | In use |
| Google LLC | “Sign in with Google”, used only if a user chooses it | The user’s Google account ID, email address and name, which Google sends to us after the user agrees on Google’s screen | United States; global | Optional enabled once Google credentials are configured |
| OpenAI, L.L.C. | AI features of the pallet planner: reading an order document that Tiercube’s built-in reader cannot parse (only when a user clicks “Read with AI”), and matching order lines that have no product code to products in your catalog by name (automatic when such a document is uploaded) | The text of the uploaded order document (which can include the names and addresses printed on it), or for matching only the product names from the order lines together with the codes and names of a short list of your catalog products. No account, login or payment data. Under OpenAI’s API terms, this data is not used to train OpenAI’s models | United States | In use since 29 September 2026 |
| Postmark (ActiveCampaign, LLC) | Delivery of service emails: sign-in links, invitations, welcome emails, trial and quota warnings, company deletion notices and demo requests submitted on the website; later, freight quote requests sent from Tiercube | Recipient email address, message content and delivery events (delivered, bounced, spam complaint) | United States | Planned |
| Stripe, Inc. | Payment processing, invoices and the billing portal, once online billing launches | Billing contact name and email, company name and address, tax ID if provided, payment method (held by Stripe, not by us), subscription and invoice records | United States; global | Planned |
(under legal review)
What is not on this list
- No analytics or advertising providers. The website and the application do not load analytics, advertising or tracking scripts.
- No email is sent to carriers by us today. Freight quote requests are sent from your own email program; your email provider is your choice and not our subprocessor.
Resources your browser loads from third parties
None. Since 28 September 2026 every file your browser needs — pages, stylesheets, scripts, fonts, and the two open-source libraries the pallet planner uses (three.js, a 3D viewer, and pdf.js, a PDF reader) — is served from our own domains. No third party receives your IP address or browser information because of our pages.
Until that date two providers appeared here and no longer do: Google Fonts (font files for Barlow, Barlow Condensed and Big Shoulders Stencil Display, on the website and in the application) and jsDelivr (version-pinned copies of three.js and pdf.js, in the application). Their files are now stored and served by us; the libraries are byte-for-byte the versions we previously loaded, checked against the same integrity hashes.
(under legal review)
Updates
To receive notice of changes to this list, the workspace owner’s email address is used automatically. Other contacts can ask to be added at hello@themorfose.com.