Legal
Sub-processors
The complete list of third parties that process personal data on our behalf when you use Herd CMS. It is short on purpose. This page is incorporated into our Data Processing Addendum by reference.
Last updated 27 July 2026
Current sub-processors
| Provider | What they do | Data they handle | Processing locations |
|---|---|---|---|
| Vercel Inc. vercel.com | Application hosting, content delivery, and storage of uploaded media | Account data, content and uploaded media, technical log data | United States and European Union |
| Neon Inc. neon.tech | Managed database hosting | Account data, organisation membership, content metadata, encrypted LinkedIn tokens, activity log | United States and European Union |
| Netlify netlify.com | Hosting and content delivery for the getherd.io website | Technical log data, and the details submitted through the website inquiry form in transit | United States |
| Resend resend.com | Email delivery: inquiry notifications to us, and marketing email to people who ask for it | Name, company, email address, phone number, marketing consent, email content and delivery logs | United States |
Each provider is engaged under a written contract that imposes data protection obligations no less protective than those in our Data Processing Addendum. Where a provider processes data outside the European Economic Area, the United Kingdom or Switzerland, the transfer relies on Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.
Other recipients
The following is not a sub-processor, but data does reach it, so it belongs on this page.
| Recipient | Role |
|---|---|
| LinkedIn Corporation / LinkedIn Ireland Unlimited Company linkedin.com | The platform posts are published to, at your instruction. LinkedIn decides for itself how it handles what it receives, so it is an independent controller rather than our processor. |
What we do not use
We do not use analytics platforms, advertising networks, session recorders, customer data platforms or third-party tracking of any kind. If that changes, the provider appears on this page before it starts processing anything.
Changes to this list
We will give account holders at least 30 days’ notice by email before a new sub-processor starts processing personal data, and we will update this page at the same time. If you are a customer and you reasonably object to a new sub-processor on data protection grounds, tell us within those 30 days and we will work with you on an alternative. If we cannot find one, you may terminate the affected part of the service without penalty for the remainder of the term.
To be added to the notification list, email info@getherd.io.