Effective date: August 14, 2026
Orion uses the following providers to operate Orion Nova. Each processes data on Orion's instructions under written terms.
| Provider | Role | Data processed | Location |
|---|---|---|---|
| Supabase | Application database, file storage, and credential vault | All Customer Data, account data | United States — us-east-2 |
| Vercel | Application hosting, delivery, and performance analytics | Request metadata, technical logs | United States |
| Resend | Transactional email (invitations, password resets, notifications) | Name, email address, message content of service emails | United States |
| Esri / ArcGIS | Mapping services, geocoding, and map imagery | Geospatial queries and tract geometry | United States |
| Anthropic | AI model provider for Atlas — only where a Customer enables AI features | Prompts and the workspace data needed to answer them; no training on Customer Data; limited retention | United States |
Customer-connected systems. Where a Customer connects its own system — for example a self-hosted ArcGIS Server or a land-management system of record — that system is operated by the Customer or its own vendor and is not an Orion subprocessor. Orion transmits credentials and queries to it at the Customer's direction.
Changes. Orion will give Customer administrators notice before adding or replacing a subprocessor that processes Customer Data, in accordance with the applicable data processing agreement, and will maintain this page as the current list.