Narsil SEO Platform — Subprocessors

Last updated: 2026-09-08 Version: 1.4

These are the third parties that process data on Narsil Creative's behalf to deliver the Narsil SEO Platform. This list forms part of the Privacy Policy.

Each provider receives only what its function requires. Locations are the primary processing region; providers may use other regions for redundancy.


Infrastructure

Provider What it does What it receives Region
Vercel Application hosting and delivery Requests to the application, including IP address and browser metadata United States
Supabase Database, authentication, file storage Account data (email address), all website and audit data, uploaded files, raw crawl payloads United States
Trigger.dev Background job execution — crawls, scheduling, retries Job metadata and the site and crawl identifiers a job operates on United States

Payments

Provider What it does What it receives Region
Stripe Payment processing, subscription billing, customer portal Your name, email address, billing address, and payment card details — collected by Stripe directly. Narsil never receives full card numbers. United States

Data collection and analysis

Provider What it does What it receives Region
DataForSEO Website crawling; Google Business Profile and review lookups; search-results data The URLs and business identifiers being analyzed. Returns page content and public business data United States and Germany (Estonian company)
Google PageSpeed Insights Page performance measurement The URLs being measured Global (Google infrastructure)

AI providers

Used for analysis and drafting features. None is permitted to train models on data sent through the Platform.

Provider What it does What it receives Region
Anthropic Analysis, recommendations, and drafting across most AI features Page content, business profile data, or text you supplied — scoped to the specific task United States
OpenAI One feature only: measuring how a business appears in ChatGPT The business name, location, and query being tested United States
Perplexity One feature only: measuring how a business appears in Perplexity The business name, location, and query being tested United States

Communications

Provider What it does What it receives Region
Resend Transactional email — crawl results, alerts, password resets, invitations Your email address and the message content United States

Product analytics

Provider What it does What it receives Region
PostHog Product analytics, session replay, feature flags A random user identifier, your organization identifier, your plan, whether you are a Narsil administrator, interaction events, and session recordings. Your email address is never sent — it is not an event property, and where the app displays an address on screen it is masked out of session recordings. Web addresses are cleaned of credentials before transmission. Session replay is switched off entirely on the multi-factor authentication and password pages. United States (US Cloud)

Notes

AI providers are separated deliberately. Three vendors serve the AI features rather than one because a feature that measures how a business appears in a particular AI assistant has to ask that assistant. Anthropic handles analysis; OpenAI and Perplexity are used only for the measurement feature that names them.

Google Business Profile data includes reviews, which contain reviewer display names and review text — personal data about people who are not Narsil customers, published publicly by them. It is processed only to produce the requested analysis.

Changes to this list. We will update this page before adding a new subprocessor that processes personal data, and will give notice as the Subscription Agreement requires. To be notified of changes, email hello@narsilcreative.com.

Narsil Creativehello@narsilcreative.com