Subprocessors
The third parties that help Heista provide the Service and may process customer data: what each one does and where. The AI provider list is generated from the models currently available in Heista.
Last updated:
Infrastructure and services
In short
Heista’s data is stored in Sydney, Australia, with Vercel and Supabase. A few supporting services, such as payments and analytics, are based in the United States.
Vercel
- Purpose
- Application hosting, global delivery network, firewall, AI gateway, and temporary file storage for media sent to some video models (deleted when the render finishes)
- Location
- Sydney, Australia; global delivery network
- Verified certification
- SOC 2 Type II; ISO/IEC 27001:2022
Supabase
- Purpose
- Database, sign-in, file storage and backups
- Location
- Sydney, Australia
- Verified certification
- SOC 2 Type II; ISO/IEC 27001:2022
Stripe
- Purpose
- Payments, invoices and tax calculation
- Location
- United States
- Verified certification
- PCI DSS Level 1 Service Provider; SOC 2 Type II
PostHog
- Purpose
- Product analytics and error reports
- Location
- United States
- Verified certification
- SOC 2 Type II
Resend
- Purpose
- Account and service emails
- Location
- United States
- Verified certification
- SOC 2 Type II
Linear
- Purpose
- Support requests you send us
- Location
- United States
- Verified certification
- SOC 2 Type II; ISO/IEC 27001:2022
Upstash
- Purpose
- Rate limiting
- Location
- United States
- Verified certification
- —
Rewardful
- Purpose
- Affiliate tracking script that runs on heista.co today: records which partner link a visitor arrived from, so a referring partner can be credited
- Location
- United States
- Verified certification
- —
Google
- Purpose
- Sign in with Google
- Location
- Where Google operates the service
- Verified certification
- —
Meta
- Purpose
- Only if you connect a Meta ad account
- Location
- Where Meta operates the service
- Verified certification
- —
Foreplay
- Purpose
- Only if you connect a Foreplay account: importing your saved ads
- Location
- Where Foreplay operates the service
- Verified certification
- —
Cal.com
- Purpose
- Only if you book a demo: your name, email and booking details
- Location
- Where Cal.com operates the service
- Verified certification
- —
ScrapeCreators, Scrape.do, SearchAPI.io, ScreenshotOne
- Purpose
- Fetching and capturing public ads and web pages you ask Heista to look up (links and search terms only, never your files)
- Location
- Where each service operates
- Verified certification
- —
| Company | Purpose | Location | Verified certification |
|---|---|---|---|
| Vercel | Application hosting, global delivery network, firewall, AI gateway, and temporary file storage for media sent to some video models (deleted when the render finishes) | Sydney, Australia; global delivery network | SOC 2 Type II; ISO/IEC 27001:2022 |
| Supabase | Database, sign-in, file storage and backups | Sydney, Australia | SOC 2 Type II; ISO/IEC 27001:2022 |
| Stripe | Payments, invoices and tax calculation | United States | PCI DSS Level 1 Service Provider; SOC 2 Type II |
| PostHog | Product analytics and error reports | United States | SOC 2 Type II |
| Resend | Account and service emails | United States | SOC 2 Type II |
| Linear | Support requests you send us | United States | SOC 2 Type II; ISO/IEC 27001:2022 |
| Upstash | Rate limiting | United States | — |
| Rewardful | Affiliate tracking script that runs on heista.co today: records which partner link a visitor arrived from, so a referring partner can be credited | United States | — |
| Sign in with Google | Where Google operates the service | — | |
| Meta | Only if you connect a Meta ad account | Where Meta operates the service | — |
| Foreplay | Only if you connect a Foreplay account: importing your saved ads | Where Foreplay operates the service | — |
| Cal.com | Only if you book a demo: your name, email and booking details | Where Cal.com operates the service | — |
| ScrapeCreators, Scrape.do, SearchAPI.io, ScreenshotOne | Fetching and capturing public ads and web pages you ask Heista to look up (links and search terms only, never your files) | Where each service operates | — |
A dash means we have not verified a certification, not that none exists.
AI model providers
In short
AI requests go through Vercel’s AI gateway to the company that makes the model being used. This list is generated from the models currently available in Heista.
When you use an AI feature, the request is sent through Vercel AI Gateway to the provider of the model being used, and may be processed on whichever of that provider’s servers is available, in any country. The headquarters column shows where each company is based, not where a particular request is processed. This list covers every provider whose models are currently available in Heista for text, image, video and audio, and changes as models are added or retired. A request may be served by the model maker itself or by an infrastructure partner of the AI gateway that hosts that model, such as Google Vertex AI or Amazon Bedrock; those partners are listed on Vercel’s subprocessor page.
Alibaba
- Model types in Heista
- text, video
- Headquarters
- China
- No-training instruction honoured
- Yes, where the provider supports it
Amazon
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
Anthropic
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
Arcee AI
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
Black Forest Labs
- Model types in Heista
- image
- Headquarters
- Germany
- No-training instruction honoured
- Not offered: provider may use data for training
ByteDance
- Model types in Heista
- text, image, video
- Headquarters
- China
- No-training instruction honoured
- Yes, where the provider supports it
Cohere
- Model types in Heista
- text
- Headquarters
- Canada
- No-training instruction honoured
- Yes
DeepSeek
- Model types in Heista
- text
- Headquarters
- China
- No-training instruction honoured
- Yes
Google
- Model types in Heista
- text, image, video
- Headquarters
- United States
- No-training instruction honoured
- Yes, where the provider supports it
HeyGen
- Model types in Heista
- video
- Headquarters
- United States
- No-training instruction honoured
- Not offered: provider may use data for training
Inception
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
Kling AI (Kuaishou)
- Model types in Heista
- video
- Headquarters
- China
- No-training instruction honoured
- Yes, where the provider supports it
Meta
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
MiniMax
- Model types in Heista
- text, video
- Headquarters
- China
- No-training instruction honoured
- Text: yes. video: not offered: provider may use data for training
Mistral AI
- Model types in Heista
- text
- Headquarters
- France
- No-training instruction honoured
- Yes
Moonshot AI
- Model types in Heista
- text
- Headquarters
- China
- No-training instruction honoured
- Yes
Morph
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
NVIDIA
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
OpenAI
- Model types in Heista
- text, image, audio
- Headquarters
- United States
- No-training instruction honoured
- Yes, where the provider supports it
Perplexity
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
Recraft
- Model types in Heista
- image
- Headquarters
- United States
- No-training instruction honoured
- Not offered: provider may use data for training
StepFun
- Model types in Heista
- text
- Headquarters
- China
- No-training instruction honoured
- Yes
Voyage AI
- Model types in Heista
- text
- Headquarters
- United States
- No-training instruction honoured
- Yes
xAI
- Model types in Heista
- text, image, video
- Headquarters
- United States
- No-training instruction honoured
- Yes, where the provider supports it
Xiaomi
- Model types in Heista
- text
- Headquarters
- China
- No-training instruction honoured
- Yes
Z.AI (Zhipu)
- Model types in Heista
- text
- Headquarters
- China
- No-training instruction honoured
- Yes
| Provider | Model types in Heista | Headquarters | No-training instruction honoured |
|---|---|---|---|
| Alibaba | text, video | China | Yes, where the provider supports it |
| Amazon | text | United States | Yes |
| Anthropic | text | United States | Yes |
| Arcee AI | text | United States | Yes |
| Black Forest Labs | image | Germany | Not offered: provider may use data for training |
| ByteDance | text, image, video | China | Yes, where the provider supports it |
| Cohere | text | Canada | Yes |
| DeepSeek | text | China | Yes |
| text, image, video | United States | Yes, where the provider supports it | |
| HeyGen | video | United States | Not offered: provider may use data for training |
| Inception | text | United States | Yes |
| Kling AI (Kuaishou) | video | China | Yes, where the provider supports it |
| Meta | text | United States | Yes |
| MiniMax | text, video | China | Text: yes. video: not offered: provider may use data for training |
| Mistral AI | text | France | Yes |
| Moonshot AI | text | China | Yes |
| Morph | text | United States | Yes |
| NVIDIA | text | United States | Yes |
| OpenAI | text, image, audio | United States | Yes, where the provider supports it |
| Perplexity | text | United States | Yes |
| Recraft | image | United States | Not offered: provider may use data for training |
| StepFun | text | China | Yes |
| Voyage AI | text | United States | Yes |
| xAI | text, image, video | United States | Yes, where the provider supports it |
| Xiaomi | text | China | Yes |
| Z.AI (Zhipu) | text | China | Yes |
“Not offered” means the provider does not offer a no-training option through the gateway, so content sent to its models may be used under the provider’s own terms. Choose a different model for sensitive material.
- Current models and their prices are listed at heista.co/pricing/models.
Our vendors’ own subprocessors
In short
Our main vendors publish the subprocessors they use.
- Vercel: vercel.com/legal/sub-processors.
- Supabase: supabase.com/legal/customer-resources/subprocessor-list.
- Stripe: stripe.com/legal/service-providers.
- PostHog: posthog.com/subprocessors.
Changes to this list
In short
This list changes as we add or remove vendors and models. Enterprise customers can ask to be told about changes.
- We update this page when we add or remove an infrastructure vendor. The AI provider list updates automatically when the models available in Heista change.
- Enterprise customers can ask to be notified of new subprocessors under their agreement. Questions about this list go to support@heista.co.