Sub-processors
qa-clone engages the following sub-processors to operate the service, each under a data processing agreement. We notify customers of changes with reasonable advance notice.
| Sub-processor | Purpose | Location | Data categories |
|---|---|---|---|
| Browserbase | Cloud browser sessions for test execution | USA | URLs, page content, test artifacts |
| Neon | Managed Postgres database | EU / USA | All application data |
| Anthropic | LLM (test generation, classification, healing) — API inference only, no model training | USA | Page content, test prompts |
| OpenAI | Embeddings for page memory — API inference only, no model training | USA | Page text |
| Cloudflare R2 | Artifact object storage | Global edge | Test artifacts |
| Clerk | Authentication & organizations | USA | Account identifiers |
| Stripe | Subscription billing | USA | Billing identifiers |
| Resend | Transactional & onboarding email | USA | Email, name |
International Transfers
Where a sub-processor processes data outside the EEA, transfers rely on Standard Contractual Clauses or an equivalent mechanism.