LEGAL
Subprocessors
Last updated: August 6, 2026
Overview
Human Behavior uses the third-party providers listed below to deliver the service. Where a provider processes personal data on our behalf, it acts as a subprocessor under our Privacy Policy.
Before a provider is given access to customer data, we review its security practices and put a written agreement in place covering confidentiality and security obligations.
Infrastructure and data processing
| Provider | Purpose | Data processed |
|---|---|---|
| Amazon Web Services | Event ingestion, session replay storage, application hosting | Session replay recordings, product events, application logs |
| Vercel | Dashboard and website hosting | Account data and request metadata in transit |
| PlanetScale | Primary application database | Account details, project configuration, billing state |
| ClickHouse Cloud | Analytics database | Product events, session metadata, aggregates |
| Redis Cloud | Session state during ingestion | Session identifiers and activity state |
| Blaxel | Replay rendering compute | Session replay content during rendering |
| Trigger.dev | Background jobs and agent runs | Project data referenced by a running job |
| Temporal Cloud | Imports from third-party analytics connections | Analytics data being imported at the customer's request |
| Pinecone | Vector index for UI snapshot search | UI snapshots derived from recorded sessions |
AI model providers
Our agents send prompts to the model providers below. Prompt content can include customer analytics data when an agent is answering a question about it. We use these providers under API terms that do not permit training on data we submit.
| Provider | Purpose | Data processed |
|---|---|---|
| Anthropic | Agent reasoning and analysis | Prompt content, which may include customer analytics data |
| OpenAI | Agent reasoning and analysis | Prompt content, which may include customer analytics data |
| Agent reasoning, replay grading | Prompt content, which may include customer analytics data | |
| xAI | Agent reasoning and analysis | Prompt content, which may include customer analytics data |
Business operations
| Provider | Purpose | Data processed |
|---|---|---|
| Google Workspace | Company email, file storage, and sign-in | Account details and correspondence |
| Resend | Transactional email | Name and email address |
| Telnyx | SMS verification and notifications | Mobile phone number |
| Stripe | Payment processing | Billing contact and payment metadata |
| Autumn | Subscription and usage management | Plan and usage counts |
Changes to this list
We update this page when we add or replace a subprocessor that handles customer data. To be notified of changes, or to raise an objection to a new subprocessor, contact security@humanbehavior.co.