// Security
Subprocessors
Last updated July 17, 2026
Userplay engages a small set of trusted subprocessors to operate the platform. Each subprocessor has a Data Processing Addendum on file and is reviewed at onboarding and annually thereafter.
All production platform and recording data processed by Userplay is hosted in the United States. Billing is handled by our payments provider acting as merchant of record, which may process payment data in other regions.
Active Subprocessors#
| Subprocessor | Purpose | Data handled | Region |
|---|---|---|---|
| Render | Application hosting and backend compute | Workspace data, recording metadata, audit logs | United States |
| PlanetScale | Managed Postgres database | Account, workspace, and player data, recording metadata, audit logs | United States |
| Vercel | Frontend hosting and CDN | Web application delivery; no customer recording data | United States / Global edge (delivery only) |
| Cloudflare | DDoS protection, WAF, object storage, and edge delivery | Session recordings, audio, and telemetry in object storage; traffic logs (30-day retention); TLS termination | United States; global edge (delivery only) |
| Mux | Video storage and streaming | Session recordings (screen video, audio) | United States |
| PostHog | Product analytics, session replay, and error monitoring | Pseudonymous product-usage events; masked session replays of the web application (inputs and text masked); error reports | United States |
| Dodo Payments | Billing and payments (merchant of record) | Customer billing details, subscription and transaction records | Global |
| Resend | Transactional email | Recipient email addresses and email contents (magic links, invitations, notifications) | United States |
| Inngest | Background job orchestration | Job payloads referencing recordings and notification emails in transit | United States |
| Upstash | Rate limiting and abuse prevention | Ephemeral request counters keyed by IP or account identifier | United States |
Change Notifications#
Userplay notifies customers of additions, removals, or material changes to this list at least 30 days in advance via email to workspace owners and an update to this page.
Customers who object in writing to a newly added subprocessor within the 30-day window may contact privacy@userplay.io. Userplay will work with the customer to find a workable resolution, which may include excluding the customer’s data from that subprocessor where technically feasible.
Subprocessor Security Posture#
Each subprocessor in the active list holds SOC 2 Type II or equivalent attestations and published security documentation. Attestation reports are available on request to enterprise customers under NDA — contact security@userplay.io.