Subprocessors
Vendors that process personal data on behalf of Distributor Portals.
| Vendor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Primary database | Account, user, tenant data | EU (AWS) |
| Vercel | Hosting + AI search audit | Usage logs, search audit | US |
| Upstash | Caching + rate limiting | Session keys, rate limit counters | US |
| OpenAI | Document embeddings | PDF content (not personal) | US |
| Microsoft (Entra + Power BI) | SSO + analytics | Profile, orders, inventory | US/EU |
| Zoho Desk + Zapier | Support tickets | Name, email, ticket content | US |
| Resend | Transactional + marketing email | Name, email address | US |
| Cloudflare | DNS + email routing | Email metadata | US |
All US-based vendors are covered by Standard Contractual Clauses. Last updated: August 2026.