Subprocessor List
Effective January 1, 2026
Prerun AI, LLC ("Prerun," "we," "our," or "us") utilizes certain third-party service providers ("Subprocessors") to support the delivery, operation, security, maintenance, and improvement of the Services.
This Subprocessor List identifies the categories of Subprocessors currently authorized to Process Customer Data and Personal Data on behalf of customers in connection with the Services.
This Subprocessor List is incorporated into and forms part of:
- The Prerun Terms of Service
- The Prerun Privacy Policy
- The Prerun Data Processing Addendum ("DPA")
- Enterprise Agreements and Order Forms, where applicable
Customers authorize Prerun to engage the Subprocessors listed below in accordance with the DPA and applicable agreements.
1. INFRASTRUCTURE AND APPLICATION HOSTING
Vercel, Inc.
Services Provided:
(a) frontend hosting;
(b) deployment infrastructure;
(c) edge network services;
(d) application delivery;
(e) website hosting.
Purpose:
Hosting and delivery of the Prerun marketing website and portions of Prerun Studio.
Location:
United States
Website:
Railway Corporation
Services Provided:
(a) application hosting;
(b) backend infrastructure;
(c) runtime environments;
(d) service deployment.
Purpose:
Hosting of application services, APIs, MCP services, and supporting platform infrastructure.
Location:
United States
Website:
2. DATABASE AND STORAGE SERVICES
Supabase, Inc.
Services Provided:
(a) database services;
(b) authentication services;
(c) file storage;
(d) application data services.
Purpose:
Storage and management of customer account information, workspace data, authentication records, and platform content.
Location:
United States
Website:
3. CONTENT DELIVERY, NETWORK SECURITY, AND ABUSE PREVENTION
Cloudflare, Inc.
Services Provided:
(a) content delivery network (CDN);
(b) DNS services;
(c) web application firewall (WAF);
(d) DDoS protection;
(e) caching services;
(f) security services;
(g) Cloudflare Turnstile bot detection and abuse prevention.
Purpose:
Performance optimization, platform security, abuse prevention, bot mitigation, and protection of the Services.
Location:
United States
Website:
Additional Privacy Information:
Cloudflare Turnstile Privacy Addendum:
https://www.cloudflare.com/turnstile-privacy-policy/
Cloudflare Privacy Policy:
https://www.cloudflare.com/privacypolicy/
4. ARTIFICIAL INTELLIGENCE SERVICES
Anthropic PBC
Services Provided:
(a) large language model services;
(b) content generation;
(c) content validation;
(d) agent certification;
(e) readiness assessment functionality;
(f) AI-powered platform features.
Purpose:
Delivery of AI-powered functionality requested by customers through the Services. Anthropic provides enterprise AI services and maintains separate trust and compliance documentation.
Location:
United States
Website:
OpenAI, LLC
Services Provided:
(a) large language model services;
(b) AI-assisted functionality;
(c) content generation;
(d) reasoning services;
(e) AI-powered platform features.
Purpose:
Delivery of AI-powered functionality requested by customers through the Services.
Location:
United States
Website:
5. CONTENT RETRIEVAL AND WEB DATA SERVICES
Firecrawl, Inc.
Services Provided:
(a) website crawling;
(b) content extraction;
(c) content retrieval;
(d) indexing services.
Purpose:
Customer-directed retrieval, extraction, and processing of publicly available web content.
Location:
United States
Website:
6. PAYMENT PROCESSING
Stripe, Inc.
Services Provided:
(a) payment processing;
(b) subscription billing;
(c) fraud prevention;
(d) financial transaction services.
Purpose:
Processing subscription payments, credit purchases, invoicing, and related financial transactions.
Location:
United States
Website:
7. EMAIL DELIVERY AND COMMUNICATIONS
Resend, Inc.
Services Provided:
(a) transactional email delivery;
(b) account communications;
(c) notification delivery.
Purpose:
Delivery of account notifications, verification emails, transactional communications, and operational messaging.
Location:
United States
Website:
8. ANALYTICS, LOGGING, AND PLATFORM OPERATIONS
Prerun may engage analytics, monitoring, logging, observability, diagnostics, and operational support providers as necessary to maintain, secure, and improve the Services.
Such providers may Process limited technical information, diagnostic information, operational information, and service telemetry solely as necessary to perform contracted services.
9. CUSTOMER-CONNECTED INTEGRATIONS
Customers may choose to connect third-party platforms, applications, services, AI providers, workflow tools, development tools, automation platforms, and content management systems to the Services.
When enabled by Customer, information may be transmitted to or received from such third-party systems at Customer's direction.
These customer-configured integrations are not generally considered Prerun Subprocessors because the customer independently authorizes and controls the connection.
Examples may include:
(a) OpenAI;
(b) Claude;
(c) CrewAI;
(d) LangGraph;
(e) Perplexity;
(f) Microsoft Copilot;
(g) Trigger.dev;
(h) MindStudio;
(i) Relevance AI;
(j) Notion;
(k) Cursor;
(l) Claude Code;
(m) OpenAI Codex;
(n) GitHub Copilot;
(o) Windsurf;
(p) Cline;
(q) Continue.dev;
(r) Gemini CLI;
(s) Amazon Q Developer;
(t) n8n;
(u) Make;
(v) Zapier;
(w) Workato;
(x) Tray.ai;
(y) Replit;
(z) Bolt.new;
(aa) Lovable;
(bb) Salesforce Agentforce;
(cc) ServiceNow AI Agents;
(dd) Google Agentspace;
(ee) Payload CMS;
(ff) WordPress;
(gg) Webflow;
(hh) Contentful; and
(ii) other customer-enabled integrations.
Customers are responsible for reviewing the privacy practices, terms, and data processing commitments of any third-party systems they choose to connect.
10. SUBPROCESSOR UPDATES
Prerun may add, remove, replace, or modify Subprocessors from time to time as necessary to operate, maintain, secure, improve, or deliver the Services.
Updated versions of this Subprocessor List will be published at:
https://www.prerun.ai/legal/subprocessors
Material changes may also be reflected within the Trust Center:
https://www.prerun.ai/resources/trust-center
11. INTERNATIONAL PROCESSING
Subprocessors may Process Customer Data and Personal Data in the United States and other jurisdictions where they maintain operations.
Where required by applicable law, Prerun implements appropriate contractual, technical, and organizational safeguards for international data transfers in accordance with the DPA.
12. CONTACT INFORMATION
Prerun AI, LLC
State of Maine, United States
Privacy Requests:
Legal Notices:
Support:
Trust Center:
https://www.prerun.ai/resources/trust-center
13. ACKNOWLEDGEMENT
This Subprocessor List forms part of the Prerun legal and compliance framework and should be read together with the Terms of Service, Privacy Policy, Data Processing Addendum, Trust Center documentation, and other legal notices made available by Prerun.