Database
Neon, Inc.
- Purpose
- Serverless PostgreSQL database used to store waitlist, account, session, and user-created workspace records.
- Location
- United States
- Privacy / DPA
- Neon Privacy
Subprocessors
Last updated: July 27, 2026
This list reflects services confirmed for the public site and early-access workspace, plus explicit notes for provider categories that are not active.
Transactional Email
Resend, Inc.
- Purpose
- Email delivery for waitlist confirmations, invitations, password resets, and opted-in product updates.
- Location
- United States
- Privacy / DPA
- Resend Privacy
Rate Limiting
Upstash, Inc.
- Purpose
- Short-lived, hashed identifiers used to prevent automated abuse of public and administrator actions. Provider analytics are disabled.
- Location
- Configured service region; provider based in the United States
- Privacy / DPA
- Upstash Privacy
Administrator Identity
Clerk, Inc.
- Purpose
- Authentication for the restricted EXPOZOR administrator control plane. Customer workspace accounts do not use Clerk.
- Location
- United States
- Privacy / DPA
- Clerk Privacy
Hosting / CDN
Vercel Inc.
- Purpose
- Hosting, CDN, and deployment infrastructure for the public site and web application.
- Location
- United States
- Privacy / DPA
- Vercel Privacy
AI / OCR
None currently in production
- Purpose
- AI-assisted categorization and receipt scanning are planned features. No AI/OCR provider is active in production today.
To be added when a provider is contracted.
- Location
- Not applicable
- Privacy / DPA
- Not applicable
Analytics
None currently active
- Purpose
- No analytics provider is currently active in the codebase.
This list will be updated before any analytics provider is added.
- Location
- Not applicable
- Privacy / DPA
- Not applicable
Payment Processing
None currently active
- Purpose
- Billing is not active and EXPOZOR does not currently collect payments.
A payment processor will be listed before paid billing launches.
- Location
- Not applicable
- Privacy / DPA
- Not applicable
| Category | Provider | Purpose | Location | Privacy / DPA |
|---|---|---|---|---|
| Database | Neon, Inc. | Serverless PostgreSQL database used to store waitlist, account, session, and user-created workspace records. | United States | Neon Privacy |
| Transactional Email | Resend, Inc. | Email delivery for waitlist confirmations, invitations, password resets, and opted-in product updates. | United States | Resend Privacy |
| Rate Limiting | Upstash, Inc. | Short-lived, hashed identifiers used to prevent automated abuse of public and administrator actions. Provider analytics are disabled. | Configured service region; provider based in the United States | Upstash Privacy |
| Administrator Identity | Clerk, Inc. | Authentication for the restricted EXPOZOR administrator control plane. Customer workspace accounts do not use Clerk. | United States | Clerk Privacy |
| Hosting / CDN | Vercel Inc. | Hosting, CDN, and deployment infrastructure for the public site and web application. | United States | Vercel Privacy |
| AI / OCR | None currently in production | AI-assisted categorization and receipt scanning are planned features. No AI/OCR provider is active in production today. To be added when a provider is contracted. | Not applicable | Not applicable |
| Analytics | None currently active | No analytics provider is currently active in the codebase. This list will be updated before any analytics provider is added. | Not applicable | Not applicable |
| Payment Processing | None currently active | Billing is not active and EXPOZOR does not currently collect payments. A payment processor will be listed before paid billing launches. | Not applicable | Not applicable |
To ask about this list, contact privacy@expozor.com.
Note: Drizzle ORM is not listed above. It is an open-source ORM library that runs inside EXPOZOR's server process and does not send data to an external service.