Subprocessors

The services that power Conferences.Center

To run the platform, we rely on a small set of trusted third-party providers (subprocessors). Each one processes a specific, limited category of data on our behalf. We keep this list current and notify customers before it changes in a way that materially affects the processing of personal data.

Current subprocessors

NamePurposeData processedNotes
RailwayApplication hosting, background workers, and managed PostgreSQL databaseAll application data at rest: account records, conferences, submissions, reviews, and audit logsPrimary compute and database host. Data encrypted in transit; secrets held server-side.
VercelFrontend hosting and global content delivery network (CDN)Requests for the web application; standard edge/CDN request metadataServes the Next.js frontend. No primary business records are stored here.
StripePayment processingCardholder and payment data entered at checkout; transaction and payout metadataPCI-DSS Level 1. Card numbers are handled by Stripe — the app never stores them. Currently in test mode pre-launch.
Google Gemini / Google AIAI assistance features (advisory, human-in-the-loop)Prompt content needed for a given assist; PII is minimized (e.g., email addresses are not sent to the AI)Assistance is advisory only — a human always makes the final decision.
ResendTransactional email deliveryRecipient email address and the contents of transactional messages (e.g., confirmations, notifications)Used for system email such as receipts, invitations, and account notices.
S3-compatible object storageStorage for uploaded filesUploaded documents such as manuscripts, camera-ready files, and attachmentsStores user file uploads. Access is scoped and served to authorized users only.

Getting notified of changes

This page is the authoritative, up-to-date list of our subprocessors. When we add or replace a subprocessor that materially affects how personal data is processed, we update this page and give affected customers advance notice through the platform or by email where appropriate.

To subscribe to change notifications or request a data processing agreement, email privacy@conferences.center.

Related: Privacy Policy · Data Retention · Security