FundMesa
Last updated: May 2026
Operating FundMesa requires routing your data through a handful of service providers. This page lists every third party that processes customer data on our behalf, what they do, and where the data sits. We update this page before material changes take effect.
| Provider | Role | Region |
|---|---|---|
| Vercel | Application hosting (serverless functions, edge routing) | United States |
| Neon | Managed Postgres database | United States (AWS us-east region) |
| Cloudflare R2 | Object storage for attachments you upload | United States |
| Resend | Transactional and reminder email delivery | United States |
| Anthropic | AI extraction from documents you choose to send through it (RFPs, award letters, contracts, budgets). Under Anthropic's commercial terms your prompts and completions are never used to train models; they may be retained for up to 30 days for trust-and-safety monitoring and are then deleted. | United States |
| Sentry | Error monitoring. Personally identifying fields, request bodies, and auth headers are scrubbed client-side before events are sent. | United States |
| GitHub Actions | Scheduled job runner (reminder dispatch, weekly digest, audit-log pruning). Does not access customer rows directly — invokes signed endpoints on the application. | United States |
We post any change to this list — new provider, removed provider, region change — on this page before it takes effect. Customers on annual agreements that include a change-notice clause receive direct notice by email at the address on file.