Authorized Subprocessors & Vendor Register
In accordance with our commitment to architectural transparency and statutory risk-minimization frameworks (GDPR Article 28(2), GDPR Article 32, and SOC 2 CC6.6), this register maintains a continuously verified list of third-party administrative and infrastructure providers. Zero subprocessors ever ingest, process, or store customer prompt text or session PII.
Cryptographically attested zero-egress client runtime (0 core data subprocessors · 100% local RAM sanitization).
Zero vendors touch customer text
No Auth0, Okta, or password stores
Static CDN, checkout & license email
Advance register update commitment
Zero User Account & Credential Subprocessors
PrivacyScrubber requires zero identity providers, authentication services (e.g. Auth0, Okta, Firebase), or credential databases. There are no user accounts, passwords, or authentication profiles. The Community Tier operates immediately in local browser RAM without registration, while commercial tiers use offline cryptographic license tokens.
Administrative & Infrastructure Providers
These vendors support static asset delivery, billing, and transactional support inquiries. None of these vendors have access to the PII scrubbing engine.
| Vendor Entity | Service Purpose | Data Handled | Security / Location |
|---|---|---|---|
Verified Zero-Processor Scope 0 Subprocessors Registered for Prompt or PII Sanitization 100% of text detection, surrogate tokenization ( | |||
| Paddle.com Market Ltd | Merchant of Record & Subscription Billing | Customer billing email, name, VAT/tax IDs, payment token. 0 prompt text / 0 PII from sessions. | PCI-DSS Level 1 · UK & Global |
| PayPal, Inc. | PayPal Payments & Subscriptions | PayPal payer account ID, transaction status. 0 prompt text / 0 PII from sessions. | PCI-DSS Level 1 · USA & Global |
| Vercel Inc. | Hosting, Serverless Billing/Licensing Functions & Web Analytics | IP address, user agent, aggregate cookie-free pageviews, speed insights & anonymous marketing CTA counters. 0 prompt text / 0 PII from sessions. | SOC 2 Type II, ISO 27001 · Global |
| Cloudflare, Inc. & Google Fonts | DNS Routing, DDoS Edge Protection & Static Font/Icon Delivery | Icon font, typography & edge asset delivery. Browser sends standard IP request on page load. 0 prompt text / 0 PII from sessions. | SOC 2 Type II, ISO 27001 · Global |
| Web3Forms / Resend | Administrative Form & License Email Delivery | User-submitted contact inquiries, transactional license keys, and CISO memo requests. Strictly air-gapped from scrubber. | SOC 2 · USA / Global |
Subprocessor Exposure Across All 4 Environments
Process isolation and third-party vendor boundaries per deployment plane.
Executes inside a dedicated browser tab Web Worker (connect-src 'none'). Static HTML/JS is delivered via Vercel/Cloudflare CDN on initial load; session scrubbing touches 0 external subprocessors.
Packaged locally via Chrome Web Store Manifest V3 with zero remote code execution. Intercepts and scrubs prompts in target LLM tab memory before submission. Prompt subprocessors = 0.
Executes as a child process over local stdio IPC pipes inside Cursor, Claude Desktop, or Windsurf. Zero prompt egress; optional anonymous CLI operational metrics only. Prompt subprocessors = 0.
Self-contained npm package (@privacyscrubber/sdk) with zero runtime network dependencies. Pure synchronous in-process V8/WASM execution inside your VPC. Subprocessors = 0.
Notification Policy for Subprocessor Updates
Advance notice governance under GDPR Article 28(2) and SOC 2 CC6.6.
In the event that PrivacyScrubber engages new administrative or hosting vendors, we will update this register at least 30 days prior to authorizing any new vendor. Because our core sanitization architecture is strictly Zero-Server, PrivacyScrubber will never engage cloud subprocessors to ingest or process your unencrypted prompt data.
Subprocessor & Vendor Audit FAQ
Direct answers for GRC auditors, DPOs, and Third-Party Risk Management (TPRM) teams.
Why are Paddle, PayPal, and Vercel listed if PrivacyScrubber is a zero-server appliance?
Does the Developer SDK or Chrome Extension contact any vendor during active scrubbing?
@privacyscrubber/sdk) execute 100% locally in host memory with zero network calls during sanitization. Commercial license keys are verified offline using embedded Ed25519 / HMAC cryptographic signatures without phoning home to a central license database. How do we import this register into OneTrust, Vanta, Drata, or ServiceNow TPRM?
PrivacyScrubber-Subprocessors-Register-2026.csv) containing vendor entities, scopes, data categories, and compliance certifications ready for direct GRC upload. 