Subprocessors
Last updated: July 5, 2026
To run FitSignal we rely on a small set of trusted providers (“subprocessors”). This page lists who they are, what they help us with, and the data they may process.
Overview
GroundForm Software LLC (trading as FitSignal) uses the subprocessors below to host, secure, and operate the service. Each is bound by a data processing agreement and processes personal data only on our instructions and for the purposes described here. This list forms part of our Data Processing Agreement at /dpa.
Survey responses, respondent contact details, and other workspace data are stored in a single Neon Postgres region in the United States. “Region & transfer basis” below notes where each provider processes data and how any cross-border transfers are safeguarded — for transfers of EEA, UK, or Swiss personal data to the US this is the Standard Contractual Clauses (SCCs) with the UK Addendum where applicable, and/or an adequacy decision.
Current subprocessors
| Provider | Purpose | Data it may process | Region & transfer basis |
|---|---|---|---|
| Vercel | Application hosting, edge delivery, cookieless web analytics | Request metadata (IP address, headers), page-performance metrics; serves the dashboard, survey pages, and the embeddable widget | US (global edge) — SCCs |
| Clerk | Authentication & account management (FitSignal account holders) | Account holder name, email, authentication credentials, session cookies | US — SCCs |
| Neon | Primary Postgres database | All workspace data: account and project records, respondent contact details (name, email, persona attributes), survey responses and response metadata (device type, locale, user agent), AI analysis results | US — SCCs |
| Upstash (Redis) | Rate-limiting, abuse prevention, short-lived cache | Rate-limit counters and tokens, cached analytics aggregates keyed by workspace identifiers | US — SCCs |
| Resend | Transactional and survey email (sent from send.fitsignal.com) | Recipient email addresses and names, survey invitation content including tokenized personal survey links, delivery and bounce events; export-ready notifications to account owners | US — SCCs |
| Trigger.dev | Background jobs (survey sends, AI analysis, exports, scheduled cleanup) | Job payloads and run logs (workspace, survey, and job identifiers); survey response data processed in memory during background runs | US — SCCs |
| PostHog | Product analytics (signed-in app and marketing site; loads only after cookie consent) | Pseudonymous user id and workspace metadata, product-usage events, and consent-gated marketing-site usage events; no survey-response or respondent data — survey pages and the widget carry no analytics scripts | US/EU — SCCs |
| Ahrefs | Marketing-website analytics (loads only after cookie consent) | Aggregate, cookieless visitor analytics — no cookies set; no respondent or survey-response data | Singapore — SCCs |
| Google (Ads & Analytics — planned, consent-gated) | Advertising conversion tracking (Google Ads) and marketing-site traffic analytics (GA4) — marketing surface only; applies only once Google Analytics/Ads are enabled, and loads cookieless via Consent Mode v2 when consent is denied | Online identifiers (advertising cookies, ad-click id), device and usage data, conversion events; no respondent or survey-response data | US — SCCs |
| Sentry | Error monitoring & session replay (all text masked) | Error diagnostics with sensitive values redacted (stack traces, request context, workspace and plan tags); session replays with all text and inputs masked | US/EU — SCCs |
| Anthropic | AI Improvement Analysis (sentiment, competitor extraction, theme clustering) | PII-redacted survey free-text and aggregates sent for analysis; theme/sentiment output — inputs and outputs are not used to train Anthropic's models | US — SCCs |
| Paddle | Billing — Merchant of Record (handles checkout, invoicing, VAT/sales tax) | Billing and payment details, customer business contact, transaction and invoice records | UK/US — SCCs |
| Cloudflare | R2 object storage for generated exports and uploaded assets (time-limited presigned URLs) | Generated export files (which may contain respondent personal data; auto-deleted after 7 days) and uploaded workspace assets | US (global network) — SCCs |
Changes to this list
We may add or replace a subprocessor as the service evolves. When we do, we will update this page and give at least 30 days’ advance notice by email to account owners, during which a customer may object on reasonable data-protection grounds as set out in our Data Processing Agreement at /dpa. To raise a change notification question, contact support@fitsignal.com.
Contact
Questions about our subprocessors or a vendor-review request: support@fitsignal.com. GroundForm Software LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA.
Related: Privacy Policy · Terms of Service · Cookie Policy · DPA · Acceptable Use · Refund Policy