Subprocessors
These are every third party that processes data on behalf of Wraps in the course of providing the service. The list is short by design, and it is published rather than available on request.
Note what is not on it: the emails you send, their recipients, and their delivery events are processed by AWS inside your own AWS account, under your own agreement with AWS. Wraps is not a subprocessor of your sending path.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Hosting for the Wraps API (Lambda), and the target of every infrastructure deployment | Infrastructure deployed into your own AWS account. AWS processes your email content and recipients as your provider, under your own agreement with AWS — not ours. | United States |
| Vercel | Hosting for the marketing site and the web dashboard | HTTP request metadata, IP addresses, and server logs (7 days) | United States |
| Neon | Managed PostgreSQL for all platform data | Account and organization records, contacts and audiences, templates, workflows, the send ledger, and recipient engagement metadata | United States |
| PostHog | Product analytics across the CLI, dashboard, and website | Anonymous CLI telemetry (90 days), dashboard usage events, and website analytics. AWS account IDs are hashed. Opt-out is supported in the CLI and the dashboard. | United States |
| Sentry | Error monitoring and performance tracing for the API and dashboard | Stack traces, request context, and the authenticated user identifier attached to an error | United States |
| Stripe | Payment processing and subscription billing | Billing contact details and payment method. Card numbers go directly to Stripe and are never held by Wraps. | United States |
Changes to this list
Before we engage a new subprocessor that processes personal data, we will update this page and give customers at least 30 days' notice by email. If you object to a new subprocessor on reasonable data-protection grounds, tell us within that window and you may terminate the affected service without penalty.
To be notified when this page changes, email privacy@wraps.dev and ask to be added to the subprocessor notice list.
International transfers
Every subprocessor above processes data in the United States. If you send to recipients in the EEA, the UK, or Switzerland, their contact records, send history, and engagement metadata are transferred to and stored in the United States. Standard Contractual Clauses are incorporated into our data processing agreement.
Last updated August 28, 2026. See also Security and the Privacy Policy.