Subprocessors
Last updated: June 2026
This page lists the current subprocessors used for SpecMCP. A subprocessor is a third party that may process personal data on our behalf in connection with providing the service.
This list reflects our current production stack and may be updated from time to time.
Current Subprocessors
Fly.io, Inc.
- Purpose: application hosting and delivery
- Data location / notes: EU deployment region in use for service hosting; vendor entity based in the USA
Supabase Inc.
- Purpose: managed Postgres and application data storage
- Data location / notes: EU-hosted database deployment in use; vendor entity based in Singapore
Resend Inc.
- Purpose: transactional email delivery
- Data location / notes: used for verification, invitation, and operational emails
Stripe Inc.
- Purpose: billing and subscription management
- Data location / notes: used for payment processing, invoices, and subscription administration
Google LLC / Google OAuth services
- Purpose: authentication provider
- Data location / notes: used only when users choose Google sign-in
GitHub, Inc.
- Purpose: authentication provider
- Data location / notes: used only when users choose GitHub sign-in
Notes on AI and Model Providers
SpecMCP does not use customer data to train our own models.
SpecMCP also does not directly forward customer prompts to third-party model providers as part of the core service described on this site. However, customers may use outputs from SpecMCP in downstream tools or workflows that involve third-party AI systems under the customer's own control.
Contact
If you need notice of changes to subprocessors in connection with a commercial agreement, please contact billing@specmcp.com.