Sub-processors

Dated list: 2026-09-13.

• Supabase — Postgres, Auth, Storage — eu-west-3 (Paris)
• Vercel — hosting, functions, Web Analytics — US/EU
• Stripe — payments — US/EU
• Resend — transactional email — US
• Google — OAuth sign-in — US

DPAs should be in place with these processors before broader commercial operation.