Subprocessors
Last updated: August 28, 2026
Continuum uses the following third-party subprocessors to provide its services. All subprocessors are contractually bound to process personal data only as directed by Continuum and to implement appropriate security measures.
Customers will be notified at least 10 days before any material change to this list via the email address on their account. Objections to new subprocessors may be raised at privacy@continuumapi.com.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, email sending (Simple Email Service) | United States |
| Supabase | PostgreSQL database hosting and storage | United States (AWS us-east-1) |
| Railway | Application server and worker process hosting | United States |
| WorkOS | Authentication, SSO, directory sync (SCIM), and audit logs | United States |
| Resend | Transactional email delivery (system notifications, receipts) | United States |
| Vercel | Web dashboard hosting (app.continuumapi.com, continuumapi.com) | United States |
| Dodo Payments | Payment processing and billing | United States |
| Anthropic | AI-powered features (where enabled by Customer) | United States |
| PostHog | Product analytics (aggregate usage metrics, no personal data exported) | United States |
Standard Contractual Clauses
For transfers of personal data from the EEA, UK, or Switzerland to subprocessors in the United States, Continuum relies on Standard Contractual Clauses (SCCs) as approved by the European Commission (Decision 2021/914) or equivalent mechanisms. Each subprocessor above either participates in a recognized adequacy framework (EU-U.S. DPF) or has executed SCCs with Continuum.
Questions
For questions about this list or to exercise your rights under the Data Processing Agreement, contact privacy@continuumapi.com.