Skip to main content

Public summary

Subprocessor list

Current core vendors involved in hosting, billing, identity, messaging, scheduling, and model operations.

Updated
August 30, 2026
Scope
Public summary
Escalation
Formal follow-up available

Current control position

The current service path uses a bounded provider set with named purposes: Supabase, Cloudflare Workers, Stripe, Postmark, Zoho, and OpenAI. Provider-side deletion, residency, or availability is not claimed beyond evidence Blacklight can verify.

Subprocessor list · Current public evidence boundary

Current safeguards

What Blacklight currently does

These statements describe implemented controls and their limits in plain language. They are not a certification, legal opinion, or substitute for an institution-specific contract requirement.

01

Current core vendors include Supabase for application data, auth, and storage; Stripe for payments; Postmark for transactional email delivery; Cloudflare for web delivery and edge infrastructure; Zoho for business email, CRM-linked outreach logging, and meeting scheduling where enabled; and OpenAI for resume generation plus bounded internal research, editorial, quality-assurance, and partner-material workflows.

02

Each provider performs a specific part of the service and is not part of a larger advertising, analytics, or reseller network.

03

The provider list is intentionally narrow so partner review can focus on the services actually involved in hosting, delivery, payments, and AI processing.