Legal
Sub-processors
Last updated: 24 May 2026. To run our products, CARROTLY PTE. LTD. relies on a small set of trusted vendors ("sub-processors") that process personal data on our behalf. Each is bound by contract to protect your data and use it only on our instructions. This list complements our Privacy Policy.
Current sub-processors
Not every vendor is used by every product; the exact set depends on the features you use. Vendors located outside Singapore are engaged under contractual terms intended to provide a comparable standard of protection to the PDPA.
- Stripe, Inc. — Payment processing, billing, and fraud prevention. (United States)
- Vercel, Inc. — Website and application hosting, content delivery. (United States / global edge)
- Amazon Web Services, Inc. — Cloud infrastructure, storage, and transactional email. (United States / European Union / Singapore)
- Anthropic, PBC — AI model provider (Claude) for generating and transforming content. (United States)
- OpenAI, L.L.C. — AI model provider for generating and transforming content. (United States)
- Google LLC — AI model provider and authentication (sign-in with Google). (United States / global)
- Microsoft Corporation — Authentication (sign-in with Microsoft) and calendar integration. (United States / global)
- PostHog, Inc. — Privacy-respecting product analytics. (United States / European Union)
- Functional Software, Inc. (Sentry) — Error and performance monitoring. (United States)
Changes to this list
We may add or replace sub-processors as our products evolve. Where required, we'll give notice of material changes in line with our Privacy Policy, so customers who need to can review them.
Questions
For questions about our sub-processors or to request a data-processing agreement, email our Data Protection Officer at dpo@carrotly-ai.com.