Subprocessors
Last updated November 9, 2026
These companies process personal data on behalf of Accred Products, LLC to provide the Accred apps. We give at least 30 days’ notice before a new one starts processing personal data.
Current subprocessors
| Company | What they do for Accred | Location |
|---|---|---|
| Cloudflare, Inc. | Hosts Hub, the apps, and this site; network security, including the connection to the Connect relay; D1 databases for Assess, Aware, Protect, Devices, Fleet, Automate, and Manage Licensing; storage for Accred Protect backups and Assess evidence uploads; abuse-prevention counters and the optional Turnstile check for the setup assistant on this site. | Global network; storage in the United States |
| Supabase, Inc. | Databases, authentication, and file storage for the apps. Supabase Auth sends account emails, such as sign-in links. | United States |
| Stripe, Inc. | Payment processing for paid plans, migration licenses, and the expanded assessment. | United States |
| Microsoft Corporation (Microsoft 365) | Sends Accred’s email from Accred’s own Microsoft 365 tenant: invitations and notices from Hub, Assess messages, and Aware lesson notices and practice emails to the client’s people. Receives the recipient’s name and email address and the message. | United States |
| Resend, Inc. | Backup sender for Hub email when Microsoft 365 is unavailable. Receives the recipient’s email address and the message. | United States |
| Microsoft Corporation (Microsoft Azure) | Temporary staging storage for files that Accred Migrate copies into SharePoint and OneDrive during a migration. | United States |
| DigitalOcean, LLC | Hosts the server that runs the Accred Connect relay, which Accred operates. Enrolled devices connect to the relay, and remote-support sessions (screen images and keyboard and mouse input) pass through it. Cloudflare carries the connection to it. | United States (New York) |
| OpenRouter, Inc. | Routes requests for AI features (Assess summaries, the Hub assistant when an organization uses Accred AI credits, and the Consult assistant, which only Accred staff can use) to model providers, currently Anthropic, OpenAI, Google, and DeepSeek models. Only the text and app data needed for that request are sent. | United States |
| Anthropic, PBC | Runs the AI model behind the setup assistant on this public site (accredproducts.com), the Hub assistant when an organization uses Accred’s included AI, and Accred IT help in Teams and Slack. For the setup assistant it receives what a visitor types and no Customer Data. For the Hub assistant and IT help it receives the question and the app data needed to answer it. Under Anthropic’s commercial terms it does not train models on this data and deletes it within 30 days, unless a request is flagged for a usage-policy review. | United States |
Notice of new subprocessors
We give at least 30 days’ notice before a new subprocessor starts processing personal data. We give it by updating this page and by emailing the Owners of every Accred organization. An organization may object on reasonable data protection grounds, as section 4 of the Data Processing Addendum describes.
- October 28, 2026: Microsoft Azure added, for temporary staging storage during Accred Migrate migrations, and Anthropic added, for the setup assistant on this site.
- November 2, 2026: DigitalOcean added, for the server that runs the Accred Connect relay. It has hosted the relay since October 30, 2026; it was listed here late.
- November 6, 2026: Microsoft 365 (Accred’s email) and Resend (backup email) listed; OpenRouter and Anthropic entries extended to the Hub assistant and Accred IT help. These services were already in use; they were listed here late.
Services you connect
Microsoft 365 (Microsoft Graph and Teams) and any AI provider accounts you link in Assess (Anthropic or OpenAI admin APIs) are services your organization chooses and controls. Accred reads from or sends to them only as you direct, using your consent or keys; they are not Accred subprocessors.