Trust
Subprocessors and data location
The infrastructure and optional providers involved in delivering PastePile, the data they receive, and the locations we can substantiate.
Andrew Young, the operator of PastePile, maintains this list.
Configured hosting regions are listed separately from locations that have not been verified. A hosting region is not a guarantee that every provider operation, support interaction, log or backup remains in that region.
Provider summary
| Vendor | What it processes | Location | Applies to |
|---|---|---|---|
| Supabase | Account and organization data, investigation records, encrypted provider and MFA credentials, audit and usage records, original artifacts, and the configured artifact backup bucket. | Database project: us-west-2, United States, verified September 11, 2026. Storage and backup configuration require separate operator confirmation. | Hosted application customers |
| Render | API traffic, uploads and evidence processed by analysis workers, report content processed by the PDF renderer, job signaling, rate limits, and application/security logs. | The deployment blueprint specifies Oregon, United States. Live service, log and support processing locations are not verified here. | Hosted application customers |
| Vercel | Website requests and API traffic, including evidence uploads in transit and provider-managed request logs. | Global edge; exact processing and log locations are not verified here. | Website and application visitors |
| Resend | Recipient addresses, transactional message subjects and bodies, invitation links, organization name and inviter address in team invitations, and operational alert summaries. | Processing location not verified here. | Configured account email and operator alerts |
| Namecheap | DNS queries and inbound mail routed through Namecheap Private Email, including content supplied by the sender. Individual mailbox delivery and forwarding settings require operator confirmation. | DNS and mailbox processing locations not verified here. | Domain resolution and support correspondents |
| Anthropic | Case reference and title; finding references, titles, narratives, severities, confidence, detector categories, technique mapping, benign explanations and unknowns; observation titles and details; evidence reference codes. | Processing location and provider retention settings not verified here. | A user requests AI prioritization and the provider is configured |
| GreyNoise | The indicator shown in the preview: public IP addresses. Provider authentication and request metadata also accompany the request. | Processing location and provider retention settings not verified here. | An explicitly requested lookup with an available provider key |
| Pulsedive | The indicator shown in the preview: public IP addresses, domains and URLs. Provider authentication and request metadata also accompany the request. | Processing location and provider retention settings not verified here. | An explicitly requested lookup with an available provider key |
| VirusTotal | The indicator shown in the preview: public IP addresses, domains, URLs and file hashes. Provider authentication and request metadata also accompany the request. | Processing location and provider retention settings not verified here. | An explicitly requested lookup with an available provider key |
| urlscan.io | The indicator shown in the preview: URLs and domains searched against existing scans. Provider authentication and request metadata also accompany the request. | Processing location and provider retention settings not verified here. | An explicitly requested lookup with an available provider key |
| Stripe | Billing contact, payment details and subscription information. PastePile stores Stripe identifiers, subscription state, dates and webhook event metadata; card details are entered on Stripe-hosted pages. | Payment, log and support processing locations not verified here. | Organizations that start checkout or use the billing portal |
Supabase
Account and organization data, investigation records, encrypted provider and MFA credentials, audit and usage records, original artifacts, and the configured artifact backup bucket.
- Location: Database project: us-west-2, United States, verified September 11, 2026. Storage and backup configuration require separate operator confirmation.
- Applies to: Hosted application customers
- Postgres stores structured records and report branding. Private object storage holds original uploaded bytes. Database backups are separate from artifact backups; their active retention and restore status require operator confirmation.
Render
API traffic, uploads and evidence processed by analysis workers, report content processed by the PDF renderer, job signaling, rate limits, and application/security logs.
- Location: The deployment blueprint specifies Oregon, United States. Live service, log and support processing locations are not verified here.
- Applies to: Hosted application customers
- The deployment includes API, analysis worker, Redis, retention, artifact backup, operational watch and PDF renderer services. Redis carries job signals and rate-limit state, not the evidence database.
Vercel
Website requests and API traffic, including evidence uploads in transit and provider-managed request logs.
- Location: Global edge; exact processing and log locations are not verified here.
- Applies to: Website and application visitors
- The browser uses the website's /api path, which forwards requests to the backend. PastePile does not use Vercel as its evidence database or artifact store.
Resend
Recipient addresses, transactional message subjects and bodies, invitation links, organization name and inviter address in team invitations, and operational alert summaries.
- Location: Processing location not verified here.
- Applies to: Configured account email and operator alerts
- Customer message types are product invitations, organization invitations, password resets and email verification. The operational watch also sends alerts to the configured operator inbox. Templates do not include evidence, case content or case titles. PastePile's email module does not send marketing, billing or retention-notice emails; Stripe notifications are a separate account configuration.
Namecheap
DNS queries and inbound mail routed through Namecheap Private Email, including content supplied by the sender. Individual mailbox delivery and forwarding settings require operator confirmation.
- Location: DNS and mailbox processing locations not verified here.
- Applies to: Domain resolution and support correspondents
- Public DNS records identify Namecheap BasicDNS and Private Email routing. Individual mailbox delivery, downstream forwarding, additional providers and processing locations require operator confirmation.
Anthropic
Case reference and title; finding references, titles, narratives, severities, confidence, detector categories, technique mapping, benign explanations and unknowns; observation titles and details; evidence reference codes.
- Location: Processing location and provider retention settings not verified here.
- Applies to: A user requests AI prioritization and the provider is configured
- Derived text can contain account names, hostnames, addresses or process names taken from evidence. Raw artifact files, evidence-value records, the entity list and compiled hunt queries are excluded. The model returns references and ordering, not authored investigation prose.
GreyNoise
The indicator shown in the preview: public IP addresses. Provider authentication and request metadata also accompany the request.
- Location: Processing location and provider retention settings not verified here.
- Applies to: An explicitly requested lookup with an available provider key
- An organization-supplied key is used by default; an operator-configured shared key can be allowed. The result records which key source was used. Raw logs and artifacts are not sent. URLs can themselves contain sensitive path or query values; review the exact preview before consenting.
Pulsedive
The indicator shown in the preview: public IP addresses, domains and URLs. Provider authentication and request metadata also accompany the request.
- Location: Processing location and provider retention settings not verified here.
- Applies to: An explicitly requested lookup with an available provider key
- An organization-supplied key is used by default; an operator-configured shared key can be allowed. The result records which key source was used. Raw logs and artifacts are not sent. URLs can themselves contain sensitive path or query values; review the exact preview before consenting.
VirusTotal
The indicator shown in the preview: public IP addresses, domains, URLs and file hashes. Provider authentication and request metadata also accompany the request.
- Location: Processing location and provider retention settings not verified here.
- Applies to: An explicitly requested lookup with an available provider key
- An organization-supplied key is used by default; an operator-configured shared key can be allowed. The result records which key source was used. Raw logs and artifacts are not sent. URLs can themselves contain sensitive path or query values; review the exact preview before consenting.
urlscan.io
The indicator shown in the preview: URLs and domains searched against existing scans. Provider authentication and request metadata also accompany the request.
- Location: Processing location and provider retention settings not verified here.
- Applies to: An explicitly requested lookup with an available provider key
- An organization-supplied key is used by default; an operator-configured shared key can be allowed. The result records which key source was used. Raw logs and artifacts are not sent. URLs can themselves contain sensitive path or query values; review the exact preview before consenting.
Stripe
Billing contact, payment details and subscription information. PastePile stores Stripe identifiers, subscription state, dates and webhook event metadata; card details are entered on Stripe-hosted pages.
- Location: Payment, log and support processing locations not verified here.
- Applies to: Organizations that start checkout or use the billing portal
- Stripe receipt, payment-failure and subscription emails depend on the Stripe account's settings. Their active configuration requires operator confirmation.
Backups and deletion
Original evidence may also have a copy in a separate backup bucket. The configured deployment uses a second Supabase bucket; the backup system also supports a separately configured provider or region. The live backup destination, successful runs and database backup retention need operator confirmation; we do not claim there is no other copy.
Removing evidence from the application does not immediately erase backups. The artifact backup cleanup defaults to a 30-day grace period from when a scheduled backup run first identifies a copy as no longer belonging to a retained artifact. Removal requires a subsequent successful run. This is a configuration default, not a verified maximum deletion deadline. Database backups and provider logs have separate retention settings. See Privacy.
Processing boundaries
- The application does not include a third-party browser analytics script. Fonts are served with the site. Infrastructure providers still process request and security metadata.
- Enrichment requires a separate explicit action after a preview. The preview itself makes no provider request. Supported internal indicator patterns are refused; this filter cannot establish whether every public indicator is sensitive.
- Parsers do not fetch links in evidence. urlscan.io integration searches existing scans; it does not submit URLs for scanning.
- PastePile has no model-training pipeline for customer evidence or feedback. Third-party data use and retention depend on the applicable provider agreement and configuration; this page does not establish those contractual terms.
- Application logging is designed to record identifiers and operational outcomes, with credential redaction. Redaction is not a guarantee that arbitrary sensitive text can never enter a log.
Agreements and changes
This factual inventory is not a Data Processing Addendum or a commitment to a particular advance notice period. Ask hello@pastepile.com for confirmation of locations, backup settings or contractual requirements before submitting data subject to those requirements.
The rest of the trust pages
Last updated .