Subprocessors
Last updated May 2026
Forge Engine relies on a small number of third-party providers (“subprocessors”) to deliver the service. They each process personal data on our behalf, only as needed, under written contracts that require appropriate technical and organisational safeguards.
We will update this page before adding or replacing a subprocessor in a material way, and we encourage customers to subscribe to the page for changes (email support@forgeengine.io if you would like to be notified directly).
Current subprocessors
| Provider | Purpose | Region | Privacy |
|---|---|---|---|
| Supabase | Authentication, Postgres database (account profiles, jobs metadata, usage ledger). | EU (Frankfurt) | Policy |
| Cloudflare | DNS, R2 object storage (uploaded videos and generated clips), edge caching, email routing for inbound mail to support@/security@. | Global edge; primary R2 region: EU (Western Europe). | Policy |
| Resend | Transactional email delivery (account confirmations, password resets, job notifications). | United States. | Policy |
| OpenAI | AI-assisted text and audio processing for clip selection, captions, and metadata generation. Forge Engine has data-processing terms in place that prohibit using your content to train OpenAI models. | United States. | Policy |
| RunPod | GPU compute for video transcription, scene detection, and rendering. Source media is processed transiently and removed from worker disks at the end of each job. | Multi-region (US, EU). Forge Engine routes EU jobs to EU pods where available. | Policy |
| Stripe | Payment processing for subscriptions and top-up packs. Card data is collected and stored by Stripe, never by Forge Engine. | United States and Republic of Ireland. | Policy |
| Vercel | Hosting for the Forge Engine web application (frontend and serverless edge routes). | Global edge; primary region: US/EU. | Policy |
| Sentry | Error and performance monitoring. Captures stack traces and limited request context. Configured to scrub PII before transmission. | United States and EU. | Policy |
What we don’t share
- We do not sell personal data.
- We do not let any subprocessor use your video content to train their own models.
- We do not share your account information with advertising networks or data brokers.
International transfers
Several of the providers above are based in the United States. Where personal data is transferred outside the UK / EEA, we rely on the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, supplemented by the technical safeguards each provider operates (encryption in transit and at rest).
Changes
Material changes will be reflected on this page with an updated date. Customers on annual contracts can opt to receive 30 days’ notice of new subprocessors by emailing support@forgeengine.io.