What this page is
To operate Compound we rely on a small set of trusted third-party service providers (“sub-processors”) that may process personal or financial data on our behalf. We publish the current list here for transparency and to support our customers' own compliance reviews. Each provider is bound by a data-processing agreement and is selected for its security posture.
Financial data is encrypted in transit and at rest. Sensitive fields (bank access tokens, account identifiers) are additionally encrypted at the application layer before storage. See our Privacy Policy for how we handle personal data overall.
Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting, edge network, CDN, WAF/DDoS, and primary data storage (Workers, D1, R2, KV, Queues, Vectorize, Workers AI). | All application data at rest (encrypted financial fields, account metadata), request metadata, IP addresses. | United States / global edge |
| Supabase, Inc. | Authentication and identity (magic-link sign-in, session/JWT issuance, MFA). | Email address, authentication identifiers, session metadata. | United States |
| Plaid Inc. | Bank account connectivity and transaction data retrieval. | Bank account connections, balances, and transactions (via tokens encrypted at rest before storage). | United States |
| Stripe, Inc. | Subscription billing and payment processing (consumer and coach plans). | Billing email, payment-method and subscription metadata. Card numbers are handled by Stripe and never touch our servers. | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery (sign-in, billing, bank, and security notifications). | Recipient email address, email content, delivery/engagement events. | United States |
| Sanity AS | Content management for marketing/blog content. | Published marketing content only — no customer financial data. | United States / EU |
| Kit (formerly ConvertKit) | Newsletter and product-update email (opt-in marketing only). | Email address and subscription preferences for users who opt in. | United States |
Changes & notice
We update this list when we add, remove, or materially change a sub-processor. The “Last updated” date above reflects the most recent change. Business customers who require advance notice of sub-processor changes can request it by emailing hello@makeitcompound.com.
Contact
Make It Compound
Email: hello@makeitcompound.com
Website: makeitcompound.com