# Service providers

> These providers support Cofr's website and hosted services. The providers involved in a particular interaction depend on the features you use.

> Effective date · October 22, 2026

## Hosted-service providers

Render hosts Cofr's production API in Ohio. Supabase provides account authentication, the production database in Ohio, and private storage for hosted plugin packages. OpenAI processes plugin instructions and tool input for Cofr-hosted prompt inference; the OpenAI API project used by Cofr has Project Residency set to Global. A connected plugin instead calls the service configured by its specialist; that destination varies by product.

The providers involved in a tool call depend on whether it uses Cofr's prompt runtime or a connection configured by the specialist.

## Website and commercial providers

GetWaitlist receives pricing-form interest details so Cofr can respond. Cofr's n8n contact workflow receives and stores contact-form submissions, sends notifications through Gmail to Cofr employees, and creates or updates records in Cofr's Twenty CRM. Google Analytics measures website and app usage. Stripe hosts Growth checkout and processes payment information; Cofr receives payment and subscription references used to manage access.

These services receive information for the purposes described above when the relevant form, analytics, or checkout feature is used.

## External AI hosts

A user may access a Cofr-hosted service through ChatGPT, Claude, Cursor, or another compatible host. The host selected by the user receives tool results and may process the user's conversation under its own terms.

## More from the Cofr Trust Center

- [Cofr Trust Center](https://cofr.io/trust)

- [Privacy and data use](https://cofr.io/trust/privacy)

- [Data processing](https://cofr.io/trust/data-processing)

- [Service providers](https://cofr.io/trust/subprocessors)

- [Structured trust data](https://cofr.io/trust/cofr-trust.json)