DRAFT, NOT YET APPROVED
This page is a draft for Devin to approve. It is not in force yet. Points to settle before it is:
- The Tigris bucket region and the proxy's second region are not chosen yet. Fill them in when they are.
- Check each provider's own subprocessor and data-location pages once the accounts exist.
- The PostHog row is DRAFT wording: confirm the event allowlist, the first-party path and the region before it is in force.
Subprocessors
Draft of 23 October 2026
These companies help run Commonplace. Each gets only what its job needs. We'll update this page, and email you, before adding one that would see your home's contents.
| Company | What it does for us | What it gets | Where |
|---|---|---|---|
| Fly.io | Runs each person's home on its own small server and disk, and runs our front door that passes requests to the right home. | Your home's contents, stored on its hardware; every request to your home passes through its network. | United States (Ashburn, Virginia) |
| Tigris | Stores encrypted backups of each home, and a copy of our invitation records. | Backups encrypted before they leave your home, which Tigris can't read; the invitation records. | United States |
| Clerk | Sign-in, sign-up, your account's sessions and the waitlist, including the mail that says you're on it and your invitation. | Your email address, sign-in history and the device details of your sessions; the email you gave the waitlist. | United States |
| Resend | Sends our own email, such as the note that your home was deleted. | Your email address and the text of those mails. | United States |
| Vercel | Serves this website and the web app's pages. | Which page was asked for and from which address, for this site and the web app's own files only. Never your home's contents and never your agents' or the web app's requests to your home. | Global network; United States company |
| PostHog (DRAFT) | Product analytics and error reports, so we can see whether Commonplace works and what breaks. | A short allowlist of events with no content: never what you saved, searched for or named. Each home is counted under a pseudonymous id. Automatic capture and session recording are off, and events are sent through our own address, not a PostHog script. | United States |
The apps you connect
Claude.ai, ChatGPT, Claude Code, Codex and any other app you connect are not our subprocessors: you choose them, and they see what they read from your home under their own policies.
AI models
Commonplace itself sends nothing in your home to any AI model, so no model provider is on this list. If that ever changes, the provider is added here and we ask you first.