Sub-processors
Last updated: 21 September 2026
This page lists third parties that process Merchant Personal Data for Shoptest, as referenced in DPA Section 8. We will post updates here and email legal@shoptest.ai subscribers / account owners at least 30 days before a new sub-processor starts processing Merchant Personal Data. To object, email legal@shoptest.ai.
| Name | What they do | Location | Transfer notes |
|---|---|---|---|
| Render | App hosting and Postgres | Virginia, US | No SCCs today. Disclosed in the DPA. We are evaluating a move of storage onto GCP. |
| Google Cloud Platform | App hosting and object storage (screenshots, logs) | Virginia, US (us-east4) | Covered by Google's Cloud DPA / EU SCCs |
| Google Cloud Platform | Browser-recording / test-execution | London, UK | Covered by Google's Cloud DPA / EU SCCs |
| Sentry | Application error monitoring | United States | Covered by Sentry's DPA / SCCs |
| Stripe | Merchant billing (not shopper card data) | EU-registered account | Stripe's standard terms / SCCs |
| Twilio SendGrid | Transactional email (alerts, product mail) | United States | Covered by Twilio SendGrid's DPA / EU SCCs |
| Slack | Optional alert delivery via the Shoptest Slack app | United States | Covered by Slack's DPA / EU SCCs |
| OpenRouter | Routes AI requests for test generation and failure diagnosis | United States | Covered by OpenRouter's DPA / SCCs (Enterprise tier) |
| Anthropic | AI models, accessed via OpenRouter | United States | Accessed only through OpenRouter; covered as OpenRouter's own sub-processor under our OpenRouter DPA |
| Google (Gemini) | AI models for vision / generation, accessed via OpenRouter | United States | Accessed only through OpenRouter; covered as OpenRouter's own sub-processor under our OpenRouter DPA |
| OpenAI | AI fallback models, accessed via OpenRouter | United States | Accessed only through OpenRouter; covered as OpenRouter's own sub-processor under our OpenRouter DPA |
AI vendors receive only what is needed for a specific test-generation or failure-diagnosis job (for example screenshots and technical logs). We instruct them not to use that content to train their models. We do not sell Merchant Personal Data.
Questions about this list?
If you have questions about any sub-processor above, or want to object to a newly announced one under the terms of our DPA, contact us at legal@shoptest.ai.