Subpemroses
Terakhir Diperbarui: 15 Oktober 2026
This page lists the third parties ("subprocessors") that Morphic, Inc. uses to process Customer Data in order to provide the Service to organizations on an enterprise agreement.
Customer Data means the content your team submits to the Service (Inputs), the content the Service generates for your team (Outputs), and the account information of the people in your organization.
1. How Morphic Uses Subprocessors
Morphic runs on cloud infrastructure and on AI models operated by other companies. Each subprocessor works under a written agreement with Morphic and receives the Customer Data described for it below.
The list is grouped by what a subprocessor does:
- Infrastructure hosts and delivers the Service. It is used for every customer.
- AI model providers run the models your team's requests use. A provider receives a request only when that request uses a model it serves.
- Request routing services carry a request to a model provider.
- Business operations covers billing, email, analytics, monitoring, and fraud prevention.
- Marketing and attribution covers services that receive account or usage signals. They never receive Inputs or Outputs.
2. Infrastructure
Infrastructure subprocessors store or carry all Customer Data.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Application hosting, file storage, message queues, secrets, logs, and metrics. Holds all Customer Data. | United States |
| Supabase | Managed PostgreSQL database and realtime updates. Holds account information and the records of chats, projects, assets, and billing. | United States |
| Redis Cloud | Caching, sessions, and streaming of live responses. Holds session data and chat content in transit. | United States |
| Temporal Cloud | Workflow orchestration for the Morphic copilot. Holds chat messages, prompts, and tool results while a request runs. | United States |
| Vercel | Isolated sandboxes where the copilot runs code and keeps the files and prompts it works on. Also hosts morphic.com. | United States |
| ImageKit | Content delivery network for uploaded and generated media, delivered through Amazon CloudFront. | Global edge network |
3. AI Model Providers
A model provider receives the prompt, the reference media, and the settings of a request only when that request uses a model the provider serves. One request can reach more than one provider on this list: when the first provider is unavailable, Morphic retries the same request with another provider that serves the same model.
| Subprocessor | Purpose | Location |
|---|---|---|
| fal | Image, video, and audio generation; upscaling; transcription; subtitles | United States |
| Google (Vertex AI and Gemini API) | Language models; image, video, and speech generation; transcription; media analysis; content safety checks | United States and other Google regions |
| OpenAI | Language models, image generation, and voice input, including the voice audio a member records | United States |
| Anthropic | Language models for the Morphic copilot | United States |
| xAI | Image generation, speech generation, and language models | United States |
| BytePlus | Video and image generation, video enhancement | Singapore |
| Kling AI | Video generation and lip sync | Singapore |
| MiniMax | Video generation | Singapore and United States |
| HeyGen | Video generation | United States |
| Luma AI | Video generation | United States |
| Runway | Image generation and video enhancement | United States |
| Black Forest Labs | Image generation | United States and European Union |
| Ideogram | Image generation | United States |
| Krea | Image generation | United States |
| Topaz Labs | Image and video upscaling | United States |
| ElevenLabs | Speech, voice cloning, music, sound effects, dubbing, and transcription, including the voice recordings a member submits | United States |
| Mirelo | Sound effects generation, for a video or from a text description | European Union and United States |
| Inworld AI | Speech generation | United States |
| Fish Audio | Speech generation and voice cloning, including the voice recordings a member submits | United States |
| Parallel | Web search and page retrieval for the Morphic copilot. Receives search queries and web addresses. | United States |
4. Request Routing Services
A routing service passes a request to a model provider and returns the result. It sees the same Customer Data as the provider it routes to.
| Subprocessor | Purpose |
|---|---|
| Vercel AI Gateway | Routes language model requests to Anthropic, OpenAI, Google, and xAI models, including models hosted on Amazon Bedrock and Microsoft Azure. Routes prompt safety checks to TypeSafe AI. |
| OpenCode | Routes copilot requests to Anthropic models |
| Infron | Routes requests to OpenAI language and image models |
| OpenRouter | Routes image generation requests to Google models and speech generation requests to Fish Audio |
5. Business Operations
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe | Payments, invoices, and subscription management. Receives billing contacts and payment details. | United States |
| Loops | Service email such as sign-in codes, invitations, and billing notices. Receives names and email addresses. | United States |
| PostHog | Product analytics and feature flags. Receives user and organization identifiers and usage events. | United States |
| Sentry | Error and performance monitoring. Receives user and organization identifiers, IP addresses, and diagnostic logs. | United States |
| Fingerprint | Fraud and abuse prevention. Receives device and browser identifiers and IP addresses. | United States |
6. Marketing and Attribution
These services receive account or usage signals. They never receive Inputs or Outputs.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Analytics and Google Ads | Usage measurement and advertising conversion measurement. Receives usage events, hashed email addresses, and advertising click identifiers. | United States |
| Meta | Advertising conversion measurement. Receives usage events and browser identifiers. | United States |
| TikTok | Advertising conversion measurement. Receives usage events and browser identifiers. | United States |
| Dub | Referral attribution. Receives user identifiers, names, email addresses, and purchase amounts. | United States |
| Churnkey | Cancellation flows for self-serve subscriptions. Receives billing customer identifiers and subscription events. | United States |
7. Integrations Your Team Turns On
Some features send data to a service your team chooses. These services are not Morphic subprocessors, because the data moves at your team's direction and under your team's own agreement with that service:
- Google Drive, when a member connects a Drive account to import files.
- Your own ElevenLabs account, when your organization connects its own API key.
- MCP clients, when a member connects Morphic to an AI assistant through the Morphic MCP server.
- Webhooks, when your organization registers an endpoint to receive events from the Morphic API.
8. Changes to This List
Morphic may add, replace, or remove subprocessors, and updates this page from time to time to reflect those changes. The latest list is always available on this page, and your team can review it at any time.
9. Contact Us
If you have any questions about this page, you can contact us by email: legal@morphic.com
Morphic, Inc.
2093 Philadelphia, Pike #2017,
Claymont, DE 19703