20 vendors, what each does for GuardKin and what paperwork stands behind it. The register is public so that you can hold GuardKin to it.
The register
Every vendor that can touch GuardKin data.
The list is built from GuardKin’s vendor register, last updated October 12, 2026.
20
vendors on the register.
0 of 19
published SOC 2 reports collected by GuardKin so far. The annual vendor review collects them.
3
not yet processing data: Plaid, Persona, Twilio. A data processing agreement is recorded for 17 of 20.
Unless a vendor is marked, it publishes a SOC 2 Type 2 report, which GuardKin has not yet collected, and a data processing agreement is recorded with it.
| Vendor | What it does | Data it handles |
|---|---|---|
| Amazon Web Services | Holds the keys GuardKin itself uses, including the audit-signing key. Stores documents and database backups. Runs monitoring. One region, us-east-1. | Confidential, Restricted |
| Vercel | Serves the websites and the web apps. | Internal, Confidential |
| Cloudflare | DNS, a firewall and protection against denial-of-service in front of the sites. | Public, Internal |
| Neon | Hosts the Postgres database: the sealed records and the plain columns beside them. | Confidential, Restricted |
| Clerk | Sign-in and sessions. | Confidential |
| Stripe | Takes payment for firm subscriptions. Card details go to Stripe and not through GuardKin. | Confidential |
| Anthropic | The language model behind the assistant feature, which is hidden for now. A zero-retention agreement. | Internal, redacted Confidential. Zero retention. |
| Axiom | Stores recent audit events. | Internal, redacted audit data |
| DocuSign | E-signature of firm contracts. | Confidential - signer name and email |
| Upstash | Short-lived counters for rate limits and lockouts. | Internal - ephemeral rate-limit and token metadata |
| Sentry | Error reports, with data scrubbing on. | Internal, scrubbed |
| Railway | Runs the API and the background workers. | Confidential, Restricted |
| Persona | Identity checks for executors. Not active yet. | Confidential - identity documents during verification. Zero retention. |
| Plaid | Fills in a bank balance. A balance passes through one server request while linking. Not active yet. | Confidential |
| Resend | Sends transactional email. | Confidential - email addresses |
| GitHub | Source code and the build pipeline. | Internal |
| Twilio | Text messages for verification notices. Not active yet. | Confidential - phone numbers |
| Inngest | Schedules and runs background jobs. | Internal, redacted Confidential |
| Have I Been Pwned (HIBP) | Checks a new password against known breaches by sending only the first five characters of its SHA-1 hash. | Public |
| Vanta | Compliance monitoring, with read-only access to configuration data in AWS, GitHub, Google Workspace and Clerk. No path to vault content. | Internal, Confidential |
Data classes follow GuardKin’s data classification policy: Public, Internal, Confidential, Restricted. Vault content is sealed on the owner’s device, so the vendors that store it hold sealed bytes. The data processing agreement commits GuardKin to advance notice of a new subprocessor.
Read the data processing agreementTell us if a vendor is a problem for you.
If a vendor on this list does not meet your policy, say so before you sign. A person reads it.