Last updated 23 October 2026
These are the service providers that process personal data on Outrun’s behalf, and the main sources of the business data in digests. Outrun is a trading name of PRWN LTD. For how we use personal data, see our privacy notice.
Processors
They act on our written instructions under data processing terms.
| Name | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database, authentication, file storage and server functions | United Kingdom (London region). Support access may come from other countries | Data stored in the UK. Any remote access: UK Addendum to the EU Standard Contractual Clauses in the Supabase data processing agreement |
| Vercel | Website and app hosting, serverless functions and cookieless page-view analytics | United States and global edge network | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| SendGrid (Twilio) | Sending digests and service emails | United States | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| Beehiiv | Sending our weekly newsletter to customers who opt in | United States | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| Anthropic | AI drafting of the suggested opening line for each lead | United States | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| MillionVerifier (Southern Vector Limited) | Checking that business email addresses are deliverable | New Zealand | UK adequacy regulations (New Zealand) |
| Cloudflare | Turnstile bot protection on sign-up forms | United States and global network | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| Stripe | Payments and subscription billing (Stripe is also an independent controller for fraud prevention and its legal obligations) | Ireland and United States | UK adequacy regulations (EEA); for the United States, the UK Extension to the EU–US Data Privacy Framework |
Data sources
These providers supply business and company data to us. They are independent controllers of their own data, so no transfer safeguard on our side applies.
| Name | What they provide | Location |
|---|---|---|
| Prospeo (Defastra Tech Inc.) | Licensed business contact data: name, job title, work email and work phone | Canada |
| PredictLeads (4see, Inc.) | Company signals such as job openings, news events and technology data | United States |
| TheirStack (THEIRSTACK SL) | Job posting and company technology data | Spain |
| Public sources | Funding news, SEC EDGAR filings, public job boards (Greenhouse, Lever, Ashby), public Reddit threads and public posts on X | Various |
Services you choose
We only send data to these services if you connect them or accept cookies.
| Name | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Slack | Delivering your digest to a Slack channel, if you connect Slack | United States | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| Telegram (Telegram FZ-LLC) | Delivering your digest to Telegram, if you connect Telegram | United Arab Emirates and global | Transfer made at your request to deliver the service you asked for (Article 49(1)(b) UK GDPR) |
| Google (Gmail) and Microsoft (Outlook) | Sending your digest through your own mailbox, if you connect it | United States and global | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
| Google (Analytics 4 and Ads) and Reddit (Reddit Pixel) | Measuring site use and ad conversions, only if you accept cookies | United States | UK Extension to the EU–US Data Privacy Framework where the provider is certified, otherwise the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider’s data processing terms |
Changes
We update this page before a new processor starts handling personal data. Customers with a data processing agreement can ask us to tell them by email about changes. Questions: hello@outrun.so.