We notify merchants at least 30 days before adding a new subprocessor that materially changes this list. Items marked optionalapply only if you’ve opted into the feature that uses them.
Current subprocessors
| Vendor | Purpose | Region |
|---|---|---|
| Supabase (Supabase, Inc.) | Postgres database and authenticated storage | US / EU (region configurable) |
| Vercel, Inc. | Hosting for the web app and report subdomain | Global edge; primary compute US / EU |
| Shopify International Limited | Billing for the Passo platform fee subscription. Charges run through your Shopify account, not a separate card on file with Passo. | Ireland / Canada |
| Stripe Payments UK Ltd | Card storage and billing for media spend top-ups only. The platform fee is billed through Shopify, not Stripe. | UK / US |
| Anthropic PBC | Used by the Passo agents to write strategy, narrative reports and voiced scripts. Shopify data is not used to train Claude. | US |
| ElevenLabs Inc. | Text-to-speech for the voiced walkthrough of your Initial Strategy | US |
| OpenAI, Inc. | Image generation for the segment portraits in your report | US |
| Google LLC | Google Analytics 4 on passoagency.com and report.passoagency.com (aggregate usage only) | US / EU |
| Agentic media buying partners (Triton Digital plus a display partner confirmed at Stage 1) | Buying the media you approved, on your behalf, under our agentic media buying agreements with each partner. | Varies by partner; each has its own DPA |
| Reddit, Inc.optional | Reddit Ads buying, if your plan includes Reddit | US |
| Meta Platforms, Inc.optional | Managed Meta Ads, if you opted into Passo running your Meta | US / EU |
| Google Adsoptional | Managed Google Ads, if you opted in | US / EU |
International transfers
Where a subprocessor is based outside the UK / EEA, transfers are covered by the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision where one applies. See the Privacy Policy section 9 for detail.