Design Partner Sign In

Sub-processors

Last updated: October 9, 2026

Glen uses a small set of third-party providers ("sub-processors") to operate the Service. A sub-processor is a vendor that processes Customer Content or personal information on our behalf, under our instructions, to deliver a specific part of the Service. This page lists every sub-processor we currently use, what each one does for us, and where it processes data. Capitalized terms have the meaning given in our Privacy Policy and Terms of Service.

Before engaging a sub-processor, we evaluate its security and privacy practices and put an agreement in place that binds it to confidentiality and to data-protection obligations consistent with our Privacy Policy. Each sub-processor is permitted to process data only to provide its service to us.

Infrastructure and data storage

Vercel Inc.

  • Purpose: Cloud hosting for the Glen application and website, serverless compute, file storage (Vercel Blob, used for assets such as organization logos), and Vercel AI Gateway, which routes search embedding and ranking requests to Voyage AI and Cohere.
  • Data processed: All Service traffic, including Customer Content in transit; stored files; request logs. AI Gateway passes requests through and does not retain their contents.
  • Location: United States.
  • Vercel privacy policy

Neon Inc.

  • Purpose: Managed PostgreSQL, the primary datastore for accounts, organizations, and Memory.
  • Data processed: Account information and Customer Content at rest.
  • Location: United States (AWS us-east-1).
  • Neon privacy policy

turbopuffer Inc.

  • Purpose: Search index for Memory, used to find relevant messages and Memory by keyword and by meaning.
  • Data processed: The text of stored messages and Memory, author names and identifiers, timestamps, and the vector embeddings of that text.
  • Location: United States (AWS us-east-1).
  • turbopuffer privacy policy

Inngest Inc.

  • Purpose: Orchestration of background jobs, including the pipeline that turns conversations into stored Memory.
  • Data processed: Job events and step payloads, which can include Customer Content while it is being processed.
  • Location: United States.
  • Inngest privacy policy

AI processing

OpenAI, L.L.C.

  • Purpose: Large-language-model inference. Glen sends Customer Content to OpenAI to assess relevance when storing and recalling Memory and to generate answers, for example when you ask the dashboard assistant or mention @glen in Slack.
  • Data processed: The Customer Content submitted for a given request. We use API access, which OpenAI does not use to train its models.
  • Location: United States.
  • OpenAI privacy policy

Voyage AI (MongoDB, Inc.)

  • Purpose: Text embeddings. Glen sends Memory, conversation transcripts, skills, and search queries to Voyage AI to turn them into vectors used for search by meaning.
  • Data processed: The Customer Content submitted for a given request, sent through Vercel AI Gateway.
  • Location: United States.
  • MongoDB privacy policy

Cohere Inc.

  • Purpose: Search result ranking. Glen sends a search query and the candidate Memory it found to Cohere, which orders them by relevance.
  • Data processed: The query and candidate Customer Content for a given search, sent through Vercel AI Gateway.
  • Location: United States.
  • Cohere privacy policy

Communications and billing

Resend, Inc.

  • Purpose: Transactional email, such as sign-in, invitation, and form-submission messages.
  • Data processed: Recipient email addresses and message contents.
  • Location: United States.
  • Resend privacy policy

Stripe, Inc.

  • Purpose: Payment processing and subscription billing for paid plans.
  • Data processed: Billing contact details and payment card information. Card details are collected by Stripe directly and never stored by Glen.
  • Location: United States.
  • Stripe privacy policy

Analytics

PostHog, Inc.

  • Purpose: Product analytics and session replay, as described in our Privacy Policy. Form inputs are masked in recordings.
  • Data processed: Usage events, device and browser information, and approximate location derived from IP address.
  • Location: United States.
  • PostHog privacy policy

Google LLC

  • Purpose: Google Analytics on the website.
  • Data processed: Usage events, device and browser information, and approximate location derived from IP address.
  • Location: United States.
  • Google privacy policy

Changes to this list

When we add or replace a sub-processor, we update this page before the new provider processes any Customer Content. If you would like to be notified of changes, email support@tryglen.com with the subject "Sub-processor updates" and we will notify you before a change takes effect. If you object to a new sub-processor, contact us at the same address and we will work with you in good faith on a resolution.

Questions? Email support@tryglen.com.