Sub-Processor List
The following third parties process data on PerkSpring's behalf. This list is maintained per MVSP Control 4.3.
Last Updated: June 18, 2026
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Clerk | Authentication & identity | User email, name, session data | US (Cloudflare) | View DPA |
| Neon | Database hosting | SHA-256 hashed emails, org data, API keys (hashed) | US East (AWS us-east-1) | View DPA |
| Amazon Web Services | Application hosting (App Runner, ECR, CloudWatch) | Application logs, request metadata | US West (us-west-2) | View DPA |
Data Handling
PerkSpring does not share, sell, or transfer plaintext email addresses. All member data is stored exclusively as salted SHA-256 hashes.
Sub-Processor Changes
PerkSpring will notify customers at least 30 days before adding a new sub-processor.
To object to a new sub-processor, contact legal@perkspring.com.