DPA

Data Processing

Data processing roles, subprocessors, transfer points, and user responsibilities for GPU workloads.

Last updated: June 15, 2026

Processing roles

For most customer task payloads, the customer controls what data is submitted and Webtunel processes it to provide queueing, runtime, billing, logging, and support features.

For account, billing, and security telemetry, Webtunel determines the processing needed to operate and protect the platform.

Subprocessors

Supabase may process authentication, database, and session data. Stripe may process payment and checkout data. GPU infrastructure providers may process task payloads during execution.

Subprocessor use is limited to services needed for account, payment, database, and runtime operation.

Customer responsibilities

Customers must ensure they have rights to process uploaded media, payload data, model inputs, and generated outputs.

Customers should design Docker workers to avoid logging secrets and to write artifacts only to intended storage paths.

Security measures

The platform separates account and runtime surfaces, uses scoped stream keys for private media, and records task events for auditability.

Administrative credit changes and billing records are traceable through transaction history.