Draft for legal review
This is a plain-English draft for the Human Made pilot. A lawyer has not reviewed it yet, and it may change before the final version.
Subprocessors
The services that process personal data for Human Made during the pilot.
Version 2026-10-02. Last updated 2 October 2026. Human Made, operated by Kyle Yeoman.
Current subprocessors
| Service | What it does for Human Made | What it handles |
|---|---|---|
| Vercel Inc. | Hosts the website and app, runs the server code, and stores uploaded files (Vercel Blob). | Everything the app shows or stores passes through it, including uploaded files, and request logs with IP addresses. |
| Neon (Postgres database) | Stores the database: accounts, briefs, submissions, statements, logs, and its backups. | All account and workspace records. |
| Google LLC (Gmail) | Sends account, security and work emails during the pilot, from a Human Made Gmail account. | Recipient name and email address, and the email's content, which can include sign-in links. |
| Cloudflare, Inc. (Turnstile) | Checks that a person, not a bot, is signing up, requesting brand access, resetting a password, or signing in after failed tries. | IP address and browser signals during the check. |
We email brand Owners at least 30 days before we add or replace a subprocessor, as the Data Processing Agreement says. Our Privacy Policy explains what each one receives.
Contact
Questions about this list: kylepyeoman@gmail.com.