Legal
Subprocessors
Last updated 1 November 2026
These are the companies we use to run Brimbley. Each only gets the data it needs for its job, under a data processing agreement. Transfers outside the EU rely on the EU Standard Contractual Clauses or an adequacy decision.
| Company | What they do for us | Data | Where |
|---|---|---|---|
| Vultr | Hosts our servers and database | All account data, uploads and results | Netherlands (EU) |
| Cloudflare | Security, delivery, DNS, email forwarding, visit counts with your OK | Traffic data, IP addresses | Global |
| Stripe | Payments, invoices and fraud checks | Name, email, payment details | EU and US |
| fal.ai | Runs the AI models that make images, video and voice | The prompts and files of each render | US |
| Model makers via fal.ai | Google, OpenAI, Black Forest Labs, Kuaishou, ByteDance, MiniMax, ElevenLabs, HeyGen and others process the inputs of a render | The prompts and files of each render | US and other countries |
| Resend | Sends account emails, like password resets and "your video is ready" | Email address, email content | EU (Ireland) |
| Sign in with Google, if you choose it | Name, email | Global |
We update this page before we add a new subprocessor. Business customers who need a data processing agreement can write to .
Brimbley
Questions: