legal
sub processors
the third-party services we use to operate alana, and what each one does.
last updated: february 2026
Alana uses the subprocessors below to provide the platform. Each processes data only as needed to deliver its service and under contractual data-protection obligations. We notify customers of material changes to this list; to receive change notifications, contact us at privacy@alana.shopping.
| subprocessor | purpose | location |
|---|---|---|
| Supabase | Primary managed PostgreSQL database (catalog and account data) | São Paulo, Brazil |
| Auth0 (Okta) | Authentication, SSO, and user provisioning | United States |
| DigitalOcean | Media storage (Spaces), managed database, and application hosting | United States (NYC) |
| Vercel | Web application hosting and edge delivery | Global (edge) |
| Cloudflare | CDN, DNS, and DDoS protection | Global (edge) |
| Redis Cloud | Caching, rate limiting, and usage tracking | United States |
| Stripe | Subscription billing and payments | United States |
| Datadog | Monitoring, logging, APM, and observability | United States |
| PostHog | Product analytics and feature flags | United States |
| OpenAI | Language models for scoring, optimization, and embeddings | United States |
| Google Cloud (Vertex AI) | AI media and virtual try-on | United States |
| RunPod | Serverless GPU compute for AI media generation | United States |
Locations reflect the primary region where each provider operates on our behalf; providers may operate globally. This list is reviewed regularly and kept current.