Sub-processors

Designless Private Limited ("Designless", "we", "us", or "our") engages the third parties listed below to deliver the Designless platform. Under our Privacy Policy and any applicable Data Processing Addendum, these vendors are sub-processors that may access or store personal data on our behalf, subject to written contractual obligations consistent with Article 28 of the GDPR.

This page is the authoritative current list. We update it as our infrastructure changes. The "Last updated" date above reflects the latest revision.

1. Current sub-processors

1.1 Infrastructure

Vendor	Purpose	Region	Privacy
Supabase	Database and platform infrastructure	Australia (Sydney); server functions run in the region nearest each request	Policy
Vercel	Web hosting and content delivery	United States, global edge	Policy
GitHub	Source code hosting and build pipeline	United States	Policy
Cloudflare	Network and security layer in front of our Supabase backend, which serves api.designless.app, cdn.designless.app, and mcp.designless.app; provided as part of Supabase's service	Global edge	Policy
Fly.io	Renders invoices and exported documents to PDF	Singapore	Policy
Browserless	Takes screenshots of documents in a hosted browser for the optional document quality check	United States	Policy
Google Fonts	Serves web fonts to the canvas (canvas.designless.app) and to shared document pages; your browser requests them from Google directly	United States, global	Policy

1.2 Authentication and identity

Vendor	Purpose	Region	Privacy
Google	Optional single sign-on	United States, global	Policy

1.3 AI model providers

Vendor	Purpose	Region	Privacy
Anthropic	Language model APIs for product features	United States	Policy
OpenAI	Text embeddings for matching and search in product features	United States	Policy

1.4 Payments

Vendor	Purpose	Region	Privacy
Polar	Subscription billing for international customers	United States	Policy
Razorpay	Subscription billing for India-region customers	India	Policy

1.5 Email

Vendor	Purpose	Region	Privacy
Resend	Transactional email delivery	United States; email is sent from Japan (Tokyo)	Policy
Svix	Delivers webhooks from Resend, our email provider, to us	United States	Policy
Google Workspace	Email for our designless.io addresses, including support, privacy, and data protection requests	United States, global	Policy

1.6 Analytics

Vendor	Purpose	Region	Privacy
Vercel Speed Insights	Page load performance measurement in LESS Studio	United States	Policy

2. Notification of changes

We will update this page when we add, replace, or remove a sub-processor. For customers on Enterprise plans, we will provide reasonable advance notice (at least 30 days) before adding a new sub-processor that processes personal data. Customers may object on reasonable grounds within that window.

3. International transfers

Some of the sub-processors above are located outside your country of residence. Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to a third country that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, where required.

4. Contact

For questions about this list or to request a copy of relevant Standard Contractual Clauses, contact our privacy team.

For data protection inquiries in the EU, you may also reach our Data Protection Officer at dpo at designless.io.