Subprocessors
Last updated: September 14, 2026
Continuum uses the following third-party subprocessors to provide its services. All subprocessors are contractually bound to process personal data only as directed by Continuum and to implement appropriate security measures.
Customers will be notified at least 10 days before any material change to this list via the email address on their account. Objections to new subprocessors may be raised at privacy@continuumapi.com.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, email sending (Simple Email Service) | United States |
| SMTP2GO | Backup email sending — used automatically only if the primary sending path is unavailable | New Zealand |
| DeBounce | SMTP-level deliverability checks as part of the email verification engine | United States |
| Google APIs / Microsoft Graph | Only when a Customer connects a Gmail or Outlook mailbox, to send and check that mailbox on their behalf | United States |
| Supabase | PostgreSQL database hosting and storage | United States (AWS us-east-1) |
| Railway | Application server and worker process hosting | United States |
| WorkOS | Authentication, SSO, directory sync (SCIM), and audit logs | United States |
| Resend | Transactional email delivery (system notifications, receipts) | United States |
| Vercel | Web dashboard hosting (app.continuumapi.com, continuumapi.com) | United States |
| Dodo Payments | Payment processing and billing | United States |
| Anthropic | AI-powered features (where enabled by Customer) | United States |
| Google Analytics | Website usage analytics (aggregate traffic metrics), loaded only after a visitor consents to cookies | United States |
Standard Contractual Clauses
For transfers of personal data from the EEA, UK, or Switzerland to subprocessors in the United States, Continuum relies on Standard Contractual Clauses (SCCs) as approved by the European Commission (Decision 2021/914) or equivalent mechanisms. Each subprocessor above either participates in a recognized adequacy framework (EU-U.S. DPF) or has executed SCCs with Continuum.
Questions
For questions about this list or to exercise your rights under the Data Processing Agreement, contact privacy@continuumapi.com.