Subprocessors
To run StaffHero we rely on a small set of trusted providers (“subprocessors”). This page lists who they are, what they help us with, and the data they may process.
Last updated: 6 July 2026
Overview
GroundForm Software LLC (trading as StaffHero) uses the subprocessors below to host, secure, and operate the service. Each is bound by a data processing agreement and processes personal data only on our instructions and for the purposes described here. This list forms part of our Data Processing Agreement.
Survey responses, comments, and other tenant data are stored in the region you choose at signup (EU or US) on separate regional databases. “Transfer basis” below notes how any cross-border transfers are safeguarded — for EU/UK data this is typically the Standard Contractual Clauses (SCCs) and/or an adequacy decision.
Current subprocessors
| Provider | Purpose | Data it may process | Region / transfer basis |
|---|---|---|---|
| Vercel | Application hosting, edge delivery, cookieless web analytics | Request metadata, page-performance metrics | US (global edge) — SCCs |
| Clerk | Authentication & account management (admins) | Admin name, email, session cookies | US — SCCs |
| Neon (regional) | Primary tenant database (EU and US) | Workspace, employee roster, survey responses, comments, briefs, clarifications | EU or US by your chosen home region |
| Neon (global) | Tenant-orthogonal content (e.g. blog) | Marketing content — no customer/employee data | Single instance |
| Upstash (Redis) | Rate-limiting, abuse prevention, ephemeral cache | Non-PII counters & tokens | Region-selected — SCCs |
| Resend | Transactional email (invitations, briefs, notifications) | Recipient email address, email content | US/EU — SCCs |
| Trigger.dev | Background jobs (brief generation, email dispatch, scheduling) | PII-safe job metadata | Region — SCCs |
| PostHog | Product analytics (signed-in app & beta only) | Pseudonymous user id + organization metadata; no employee or response data | EU/US — SCCs |
| Ahrefs | Marketing-website analytics (loads only after cookie consent) | Aggregate, cookieless visitor analytics — no cookies; raw IP addresses not stored | Singapore — SCCs |
| Google (Ads & Analytics) | Advertising conversion tracking (Google Ads) and marketing-site traffic analytics (Google Analytics 4) — marketing surface only, loaded only after cookie consent | Online identifiers (advertising cookies, ad-click id), device & usage data, and conversion events; no employee or survey-response data | United States — SCCs |
| Sentry | Error monitoring | Error diagnostics with sensitive keys redacted; tags (action, org, plan) | US/EU — SCCs |
| Anthropic | AI Leadership Brief generation | De-identified open-text samples & aggregates sent as prompts; brief output | US — SCCs; inputs/outputs not used to train Anthropic’s models |
| Stripe | Payment processing — direct checkout, StaffHero as seller | Billing & payment details, customer business contact | United States — SCCs |
| Paddle | Billing — Merchant of Record (reseller; handles checkout & tax) | Billing & payment details, customer business contact | United States — SCCs |
| Rewardful | Partner & affiliate referral tracking (marketing surface + checkout attribution, loaded only after cookie consent) | Referral identifiers and purchase-attribution metadata via Stripe; no employee or survey-response data | United States — SCCs |
| Cloudflare | Logo file storage (R2) and CAPTCHA (Turnstile) | Uploaded company logo, CAPTCHA challenge tokens | SCCs |
Changes to this list
We may add or replace a subprocessor as the service evolves. When we do, we will update this page and — for customers with a signed DPA — provide at least 30 days’ advance notice where required, during which a customer may object on reasonable data-protection grounds. To be notified of changes, contact hello@staffhero.com.
Contact
Questions about our subprocessors or a vendor-review request: hello@staffhero.com.
Related: Privacy · Terms · Cookies · DPA · Subprocessors · Refund · Security