Subprocessors
Every company that processes data on our instructions, what it does, and where it operates.
Last updated: October 19, 2026
The short version
A subprocessor is a company we use that could, in the course of doing its job, handle data belonging to you or your customers. We publish the list rather than sending it on request, so it can be checked before you decide to connect anything. If you want to be told when it changes, email contact@tryorbt.com and we will add you to the notice list.
Where the paperwork stands, stated plainly. Most of the companies below incorporate a data processing agreement into the terms we accepted when we opened the account, which binds them to process on our documented instructions. A few require a separate agreement to be signed and returned, and we are working through those now. We would rather write that sentence than the tidier one, because a subprocessor page is only worth reading if it is accurate on the day you read it. Ask us at contact@tryorbt.com for the current status of any single vendor here and we will tell you exactly where it stands.
1. Infrastructure
These hold the product itself. Railway is the one that matters most: it holds the Orbt app, its database, and the encrypted credentials for any account you connect. Those credentials are encrypted by us before they are written, with a key Railway does not hold, so a compromise of the database alone does not yield a working token.
| Company | What it does for us | What it can hold | Where |
|---|---|---|---|
| Vercel | Hosting and content delivery for tryorbt.com | Server logs, IP addresses, page analytics | United States |
| Railway | Hosting and the database for the Orbt app at run.tryorbt.com | Account records, saved boards, and encrypted credentials for accounts you connect | United States |
| Cloudflare | DNS, edge delivery and object storage | Request metadata and IP addresses; stored research data | United States, with a global edge |
2. Research and language models
Orbt is an AI research product, so these process the brand and market information involved in producing your analysis. All of them operate under business terms that do not permit them to train on your data. Aggregated readings from accounts you connect are not sent to any of them.
| Company | What it does for us | What it can hold | Where |
|---|---|---|---|
| OpenAI | Language models used in research and drafting | Prompts containing brand and market information you provide | United States |
| Anthropic | Language models used in research and drafting | Prompts containing brand and market information you provide | United States |
| Language models, Maps Platform lookups, and Workspace | Prompts, place queries, and business correspondence | United States | |
| OpenRouter | Routing layer in front of language-model providers | Prompts in transit to the model providers above | United States |
3. Running the business
These handle correspondence, scheduling and the ordinary operation of a company.
| Company | What it does for us | What it can hold | Where |
|---|---|---|---|
| Cal.com | Demo scheduling | Name, email address, and anything you write in the booking form | United States |
| Slack | Shared channels with client teams | Messages and files you send us | United States |
| Microsoft | Productivity tools | Business correspondence | United States |
4. What is not on this list
- The platforms you connect. Stripe, Shopify, Google Analytics, Meta and the rest are not our subprocessors. They are your own providers, and we read from them on your instruction. What we read and what we keep is described in section 6 of the privacy policy.
- The public sources behind the research. The Orbt app reads public datasets and websites. Those publishers receive no data about you. Their terms and our attributions are on the licence page for the Market Index, and on the sources page inside the app for the map.
- A payment processor. The Orbt app does not take payment yet. One will be added here before it does.
5. Changes
When we add a subprocessor, we update this page and the date at the top. Customers on the notice list are told before the new subprocessor begins processing, so there is time to object. If you object and we cannot resolve it, you may end the affected service.
6. Contact
ORBT KOREA, Inc. (주식회사 오르빗코리아)
Startup Studio No. 8, 13 Gaeunsa 1-gil, Seongbuk-gu, Seoul, Republic of Korea
contact@tryorbt.com
See also our Privacy Policy and Terms and Conditions.