Subprocessors
Last updated: May 2026
Ordiko routes limited personal data to the third-party data processors listed below to operate the platform. We keep this list current; check the date above for the last review.
| Name | Purpose | Data shared | Region |
|---|---|---|---|
| Clerk | Authentication and session management | Email, name, profile image, IP and device metadata | United States |
| Neon | Managed Postgres database hosting | All application data persisted to the platform database | EU (Frankfurt) primary, multi-region read replicas |
| Vercel | Hosting, edge compute, Web Analytics and Speed Insights | Page paths, request headers, Core Web Vitals, geo (country only) | Global edge network |
| Resend | Transactional and marketing email delivery | Recipient email address, message content, delivery events | United States and EU |
| Tag Manager, Analytics 4, Search Console OAuth, Indexing API | Cookie-derived client id (hashed), page interactions, search performance metrics | Global (Google-owned infrastructure) | |
| Microsoft | Clarity behavioural analytics (heatmaps, session replays) | Anonymised interaction events, masked page DOM | United States |
| Cloudflare | Privacy-friendly Web Analytics | Page paths, anonymised visitor counts, performance signals | Global edge network |
| Trigger.dev | Background-job orchestration for SEO, indexing, and email jobs | Job payloads (may include order ids, store ids, user ids) | United States |
| Anthropic | AI features (Claude API) for content drafts and assistance | Prompts and inputs you submit to AI features | United States |
Changes to this list
We update this page whenever we add or remove a subprocessor. Material changes are also surfaced in our changelog.
Contact
Questions about this list? Email privacy@ordiko.shop.