Sub-processors
Last updated: July 5, 2026
Glen uses a small set of third-party providers ("sub-processors") to operate the Service. A sub-processor is a vendor that processes Customer Content or personal information on our behalf, under our instructions, to deliver a specific part of the Service. This page lists every sub-processor we currently use, what each one does for us, and where it processes data. Capitalized terms have the meaning given in our Privacy Policy and Terms of Service.
Before engaging a sub-processor, we evaluate its security and privacy practices and put an agreement in place that binds it to confidentiality and to data-protection obligations consistent with our Privacy Policy. Each sub-processor is permitted to process data only to provide its service to us.
Infrastructure and data storage
Vercel Inc.
- Purpose: Cloud hosting for the Glen application and website, serverless compute, and file storage (Vercel Blob, used for assets such as organization logos).
- Data processed: All Service traffic, including Customer Content in transit; stored files; request logs.
- Location: United States.
- Vercel privacy policy
Neon Inc.
- Purpose: Managed PostgreSQL, the primary datastore for accounts, organizations, and Memory.
- Data processed: Account information and Customer Content at rest.
- Location: United States (AWS us-east-1).
- Neon privacy policy
Inngest Inc.
- Purpose: Orchestration of background jobs, including the pipeline that turns conversations into stored Memory.
- Data processed: Job events and step payloads, which can include Customer Content while it is being processed.
- Location: United States.
- Inngest privacy policy
AI processing
OpenAI, L.L.C.
- Purpose: Large-language-model inference and text embeddings. Glen sends Customer Content to OpenAI to assess relevance when storing and recalling Memory and to generate answers, for example when you ask the dashboard assistant or mention @glen in Slack.
- Data processed: The Customer Content submitted for a given request. We use API access, which OpenAI does not use to train its models.
- Location: United States.
- OpenAI privacy policy
Communications and billing
Resend, Inc.
- Purpose: Transactional email, such as sign-in, invitation, and form-submission messages.
- Data processed: Recipient email addresses and message contents.
- Location: United States.
- Resend privacy policy
Stripe, Inc.
- Purpose: Payment processing and subscription billing for paid plans.
- Data processed: Billing contact details and payment card information. Card details are collected by Stripe directly and never stored by Glen.
- Location: United States.
- Stripe privacy policy
Analytics
PostHog, Inc.
- Purpose: Product analytics and session replay, as described in our Privacy Policy. Form inputs are masked in recordings.
- Data processed: Usage events, device and browser information, and approximate location derived from IP address.
- Location: United States.
- PostHog privacy policy
Google LLC
- Purpose: Google Analytics on the website.
- Data processed: Usage events, device and browser information, and approximate location derived from IP address.
- Location: United States.
- Google privacy policy
Changes to this list
When we add or replace a sub-processor, we update this page before the new provider processes any Customer Content. If you would like to be notified of changes, email founders@tryglen.com with the subject "Sub-processor updates" and we will notify you before a change takes effect. If you object to a new sub-processor, contact us at the same address and we will work with you in good faith on a resolution.
Questions? Email founders@tryglen.com.