Subprocessors
Providers that process personal data on behalf of Fathom Audit to run the service.
Last updated: 10/13/2026
Draft pending legal review. The text is complete and describes what the service actually does, but a lawyer has to review it before it counts as final. One piece of information is also missing: the company isn’t incorporated yet, so its legal name, registered address and tax number aren’t here.
| Service | Provider | Purpose | Location |
|---|---|---|---|
| Website and app hosting | Vercel Inc. | Serving pages and running server code | United States |
| Database | Supabase Inc. | Storing accounts, sites, audits and content | United States |
| Website analytics | Plausible Insights OÜ | Measuring which pages get used most, without identifying anyone and without cookies | European Union |
| Speed measurement (PageSpeed Insights) | Google LLC | Measuring speed on the home page in every scan and, on a paid plan, on one page per template and the pages you mark as important. It only receives those pages’ URLs | United States |
| Email delivery | Resend, Inc. | Free scan emails, account emails (verification, receipts and payment notices) and internal notices; later, alerts and reports | United States |
| Payments | PayPal Pte. Ltd. | Charging the subscription, issuing refunds and handling disputes. It receives your email and the amount; your card or PayPal account details are handled by PayPal and never pass through us | Singapore |
| File storage | Cloudflare, Inc. | Blog images, audit results and screenshots, agency logos, report PDFs and exports. It’s private: files are only served through our site | United States |
We’ll give at least 30 days’ notice before adding a new subprocessor. If you want us to tell you directly, write to support@fathomaudit.com. More in the privacy policy.