Forge Tomorrow – Sub-processors
Last updated: October 26, 2026
We work with carefully selected third-party service providers ("sub-processors") to help us operate, secure, and improve the Forge Tomorrow platform. These sub-processors may process limited personal data on our behalf and are contractually required to:
- Use the data only to provide services to Forge Tomorrow
- Maintain appropriate security and confidentiality measures
- Comply with applicable privacy and data protection laws
Current Sub-processors
The table below lists our current sub-processors, the purpose of their processing, the type of data involved, and their primary processing locations.
| Service | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Frontend hosting & serverless functions | Logs, IP addresses, request metadata | USA |
| Render | Managed PostgreSQL database | Application and user records | USA (Oregon) |
| GitHub | Source code hosting and development workflows | Repository, development, and workflow metadata | Provider-managed locations |
| Stripe | Payment processing | Billing information, transaction details (no full card numbers) | USA |
| OpenAI | AI features (resume builder, insights, support, etc.) | Only the text and content you explicitly send to AI features | USA |
| Grok / xAI | Optional / experimental AI features | Only the text you explicitly send to experimental AI features | USA |
| Groq | AI inference (performance and speed testing) | Only the text you explicitly send to AI features using Groq | USA |
| Zoho Mail / Zoho Workplace | Company & transactional email | Email addresses, message content, metadata | USA / India |
| Brevo (formerly Sendinblue) | Newsletters & marketing emails | Email addresses, subscription status, engagement metrics | EU |
| EmailJS | Contact forms & system emails | Email addresses, form content, basic metadata | USA |
| Cookie-Script.com | Cookie consent management | Consent preferences, country / region signals | EU |
Changes to This Sub-processor List
We may add or remove sub-processors as our platform evolves. When we make material changes to this list that affect how your personal data is processed, we will update this page and, where required by law or our agreements, notify you in advance or provide an opportunity to object.
We review each sub-processor's security, privacy practices, and compliance posture before engagement and periodically thereafter.
Questions or Concerns
If you have questions about any sub-processor listed here, or how your data is shared with them, contact us at privacy@forgetomorrow.com.