Sub-processors
Last updated: April 20, 2026
BentoCS uses a limited set of third-party sub-processors to operate the Service. This page lists each sub-processor, its purpose, and a link to its privacy documentation. We contractually require all sub-processors to protect personal data to at least the same standard required by our Privacy Policy.
We will update this page at least 10 days before adding or materially changing a sub-processor. If you have questions or objections, contact us at team@bentocs.com.
Current sub-processors
| Sub-processor | Purpose | Location | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | United States | View |
| Vercel | Application hosting and edge delivery | United States / Global CDN | View |
| Anthropic | AI-powered fit scoring and content generation | United States | View |
| Resend | Transactional email delivery | United States | View |
| Stripe | Payment processing and subscription management | United States | View |
| Clearbit (HubSpot) | Company logo and firmographic enrichment for demo personalisation | United States | View |
PHI prohibition
BentoCSis not a covered entity or business associate under HIPAA. Customers must not upload, store, or process Protected Health Information (“PHI”) through the Service. PHI includes individually identifiable health information as defined under 45 CFR §160.103.
Demo data
Data submitted through interactive demo environments is used solely to personalise the demo experience and is purged within 24 hours of the demo link expiry date. Demo data is never used to train AI models.
Changes
We maintain a changelog of sub-processor additions and removals. To receive notifications of changes, email team@bentocs.comwith the subject line “Sub-processor updates”.