Sub-processorstrust
Sub-processors
Last updated June 2026
To operate the Bluefield API we rely on the third-party services below. We list each one, what it does, roughly where it runs, and what it processes. Several of these only ever see the target URL you ask us to fetch — never your account details.
| Sub-processor | Purpose | Location | Data processed |
|---|---|---|---|
| Fly.io | API and worker compute (hosting) | United States (us-east) | Submitted URLs, request metadata, and account identifiers at runtime |
| Neon | Managed Postgres database | United States | Account records, subscriptions, usage and credit ledger, hashed API keys |
| Cloudflare R2 | Object storage | United States | Stored watch-mode captures, snapshots, and screenshots |
| AWS KMS | Custody of the attestation signing key | United States (us-east-1) | No customer content — holds the private signing key only |
| Inngest | Background job orchestration and webhook delivery | United States | Job payloads (target URLs) and webhook delivery metadata |
| Stripe | Payments and billing | United States | Billing contact and subscription state; card data is held by Stripe, not by us |
| Anthropic | LLM-based structured extraction | United States | Page content you submit when you use structured extraction |
| Resend | Transactional email | United States | Your email address for account and notification emails |
| Bright Data | Unlocker / stealth proxy egress (anti-bot tier) | Global egress | The target URL you ask us to fetch; no account PII |
| IPRoyal | Residential proxy egress (browser tier) | Global egress | The target URL you ask us to fetch; no account PII |
| Vercel | Marketing site and dashboard hosting | Global edge / United States | Sign-in flow and basic site analytics |
We may add or change sub-processors as the product evolves. Enterprise customers can request advance notice of material changes as part of a data processing agreement. Questions? Email privacy@bluefields-data.com.
Locations are indicative of where processing primarily occurs and are not a guarantee of exclusive residency. This page is not legal advice.