Andora
Sub-processors
Third parties that may process customer data to operate Andora Shield and the control plane. Last updated 2026-10-12.
For security controls see Security. For privacy commitments see Privacy.
| Vendor | Purpose | Region |
|---|---|---|
| Vercel Inc. | Application hosting, edge/network delivery, serverless compute | United States (multi-region edge) |
| Netlify | Marketing / production web hosting (where configured) | United States / EU edge |
| Supabase | Managed PostgreSQL database and related platform services | EU (eu-central-1) for primary Andora project |
| Resend | Transactional email delivery | United States |
| Lemon Squeezy | Subscription billing and payment processing (when enabled) | United States / EU |
| Upstash | Optional Redis for Shield rate limiting | Configurable (customer / env) |
| Sentry | Application error monitoring and performance traces | United States / EU (per project config) |
| Google / GitHub / Microsoft | Optional OAuth / Azure AD identity providers for sign-in | Global (IdP) |
| Amazon Web Services (AWS) | Optional KMS key wrapping when Shield KMS provider is enabled; AI Bedrock upstream | Configurable (customer / env) |
| Google Calendar / booking (Calendly or equivalent) | Demo scheduling when customers book a call | United States / Global |