Legal
Sub-processors
The complete list of third parties that process personal data on our behalf when you use Herd CMS. It is short on purpose. This page is incorporated into our Data Processing Addendum by reference.
Last updated 27 July 2026
Current sub-processors
| Provider | What they do | Data they handle | Processing locations |
|---|---|---|---|
| Vercel Inc. vercel.com | Application hosting, content delivery, and storage of uploaded media | Account data, content and uploaded media, technical log data | United States and European Union |
| Neon Inc. neon.tech | Managed database hosting | Account data, organisation membership, content metadata, encrypted LinkedIn tokens, activity log | United States and European Union |
Each provider is engaged under a written contract that imposes data protection obligations no less protective than those in our Data Processing Addendum. Where a provider processes data outside the European Economic Area, the United Kingdom or Switzerland, the transfer relies on Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.
Other recipients
The following is not a sub-processor, but data does reach it, so it belongs on this page.
| Recipient | Role |
|---|---|
| LinkedIn Corporation / LinkedIn Ireland Unlimited Company linkedin.com | The platform posts are published to, at your instruction. LinkedIn decides for itself how it handles what it receives, so it is an independent controller rather than our processor. |
What we do not use
We do not use analytics platforms, advertising networks, session recorders, customer data platforms or third-party tracking of any kind. If that changes, the provider appears on this page before it starts processing anything.
Changes to this list
We will give account holders at least 30 days’ notice by email before a new sub-processor starts processing personal data, and we will update this page at the same time. If you are a customer and you reasonably object to a new sub-processor on data protection grounds, tell us within those 30 days and we will work with you on an alternative. If we cannot find one, you may terminate the affected part of the service without penalty for the remainder of the term.
To be added to the notification list, email info@getherd.io.