Subprocessor Notification Policy
We will notify customers at least 14 days before engaging any new subprocessor. Notification will be sent via email and posted on this page. Customers may object to a new subprocessor by contacting privacy@ethercam.com within 7 days of notice.
Ethercam uses the following subprocessors to deliver the Vision API platform. All subprocessors are contractually bound to process data only for the purposes described and to maintain appropriate security measures. We review our subprocessor list regularly and will notify customers of any changes.
OpenAI
AI image analysis and processing (GPT-4o, GPT-4o-mini)
Data Processed
Images submitted for analysis (processed in memory, not stored)
Safeguards
Data processed under OpenAI API terms. OpenAI does not use API data for training.
Website
https://openai.comStripe
Payment processing, subscription management
Data Processed
Payment card information (tokenized), billing address, transaction history
Safeguards
PCI DSS Level 1 certified. Card data never touches our servers.
Website
https://stripe.comClerk
User authentication, identity management
Data Processed
Email, name, profile image, authentication credentials
Safeguards
SOC 2 certified. Data encrypted at rest and in transit.
Website
https://clerk.comVercel
Cloud hosting, CDN, edge functions
Data Processed
Server logs, request metadata, deployment artifacts
Safeguards
SOC 2 certified. GDPR compliant. Data stored in US regions.
Website
https://vercel.comNeon (PostgreSQL)
Database hosting
Data Processed
Customer records, API keys, usage logs, billing data
Safeguards
SOC 2 certified. Encryption at rest (AES-256) and in transit (TLS 1.3).
Website
https://neon.tech