Last updated: July 19, 2026
FADE Neuro Video Analyzer uses the following third-party sub-processors to provide and operate the Service. This list is maintained as required by GDPR Article 28. We will update this page when sub-processors change and notify affected users via email.
| Sub-Processor | Purpose | Data Processed | Location | Certifications |
|---|---|---|---|---|
| Google (Gemini AI) | AI video analysis and scoring | Video file (temporarily), analysis prompts | United States | SOC 2 Type II, ISO 27001 |
| Google (Gmail) | Transactional analysis notifications | Recipient email, video name, analysis status, and summary scores | United States | SOC 2 Type II, ISO 27001 |
| Clerk | User authentication and identity | Email, name, login credentials | United States | SOC 2 Type II |
| Stripe | Payment processing | Payment method, billing address | United States | PCI DSS Level 1 |
| Supabase | Database, backend, API, and private video storage | Account data, analysis results, processing video copies | United States (AWS) | SOC 2 Type II |
| Vercel | Frontend hosting and analytics | Anonymized usage events (cookieless) | Global CDN | SOC 2 Type II |
| PostHog | Optional product analytics after consent | Pseudonymous account identifiers, product events, page path, and device information | United States | See vendor trust center |
| Sentry | Error monitoring and diagnostics | Error stack traces, browser info (no PII) | United States | SOC 2 Type II |
| Brain Lab Cloud | AI brain prediction inference (GPU) | Video URL (temporarily) | United States | SOC 2 Type II |
| FreeConvert | Video compression (files over 30MB) | Video file (temporarily) | United States | HTTPS encrypted |
| Deepgram | Audio transcription | Audio from video (temporarily) | United States | SOC 2 Type II |
| RapidAPI | URL resolution for social media | Video/post URLs | United States | HTTPS encrypted |
Data minimization: Each sub-processor receives only the minimum data required to perform its function. Video files are transmitted only to providers needed for processing; each provider handles its copy under its documented retention terms. FADE's own private copy has a 30-day processing window and is then queued for deletion within 24 hours.
Changes to this list: We will notify users via email at least 30 days before adding a new sub-processor that processes personal data. If you object to a new sub-processor, you may terminate your account.
For questions about our sub-processors or to request our Data Processing Agreement (DPA), contact us at fade.app.mail@gmail.com.