Subprocessors
Last updated October 28, 2026
Task Viking uses a small set of trusted third-party services (subprocessors) to deliver our platform. Each subprocessor is contractually bound to maintain appropriate security and confidentiality standards, and processes customer data only on our instructions and for the purposes described below.
Current subprocessors
| Provider | Purpose | Data processed | Hosting region | Compliance |
|---|---|---|---|---|
| Supabase | User authentication, database and file storage | Account identifiers, email, name, workspaces, tasks, updates and attached files | United States | SOC 2 Type II |
| Vercel | Application hosting, serverless compute and content delivery, and the AI Gateway that carries the assistant's requests | All application and website traffic | United States and global edge | SOC 2 Type II |
| Stripe | Subscription billing and payment processing; through Stripe Managed Payments, Link is the seller of record and handles sales tax and VAT | Billing contact, payment method, transaction data | United States | SOC 2 Type II, PCI DSS Level 1 |
| Anthropic | The AI assistant's answers | Questions to the assistant and the tasks, people, updates and files it reads to answer them | United States | SOC 2 Type II |
| OpenAI | Calls with the assistant: speech to text, and its replies as speech | The audio of calls with the assistant and the text of its spoken replies | United States | SOC 2 Type II |
| Resend | Sending Task Viking's emails: invitations, mentions, assignments and reminders | Recipients' names and email addresses, and the emails' contents | United States | SOC 2 Type II |
| Sentry | Error monitoring | Technical details of errors, which can include account identifiers | United States | SOC 2 Type II |
Security posture
- Data in transit is encrypted with TLS between your browser, our application, and each subprocessor.
- Data at rest is encrypted at the storage layer by our infrastructure providers.
- Access to production data is limited to authorized Task Viking personnel.
- Task Viking is not currently SOC 2 or HIPAA certified as a company. We do not offer a Business Associate Agreement (BAA) and Task Viking is not intended for the storage or processing of Protected Health Information (PHI).
Updates to this list
We may update this list from time to time as our infrastructure evolves. Material changes will be reflected on this page. If you have questions about our subprocessors or would like to be notified of future changes, contact us at support@taskviking.com.