Current subprocessors
We use the following providers:
- Supabase — application hosting, database, authentication and file storage.
- Stripe — payment processing and subscription billing.
- Apify — automated scanning and leak detection across public sites and search engines.
- Railway — runs openDMCA's processing worker (image and video fingerprints, face matching when a creator has consented, evidence screenshots).
- Resend — sending takedown notices and account emails, and reporting whether each one was delivered.
- Google — search de-indexing requests and, if you connected a Gmail account before sending moved to Resend, reading replies to notices previously sent from it.
- Plausible Analytics — cookieless page-view and free-tool usage counts, when site analytics are switched on. It records no personal data and sets no cookies.
How we choose them
We select providers that offer appropriate security and data-protection commitments, and we limit each to only the data needed for its function.
Changes to this list
We may add or replace subprocessors as the service evolves; this page is the source of truth and will be updated when it changes. Questions can be sent to privacy@opendmca.com.