Sub-Processors
Last updated: 2026-01-05
EchoNext uses carefully selected third-party service providers (sub-processors) to help deliver our services. This page provides transparency about who these providers are and what data they may process on our behalf.
Under GDPR Article 28, we maintain this list of sub-processors to ensure transparency about how your data is processed. All sub-processors are bound by data processing agreements that require them to protect your data.
Current Sub-Processors
| Provider | Purpose | Data Processed | Location | Legal Documents |
|---|---|---|---|---|
| Supabase | Database hosting and file storage | All user data, testimonials, videos, account information | US / EU | |
| Stripe | Payment processing | Payment details, billing information, customer IDs | US | |
| Resend | Email delivery | Email addresses, email content, notification data | US | |
| OpenAI | Content moderation | Testimonial text (for moderation analysis) | US | |
| Google (Gemini API) | AI enhancement features | Testimonial text (for AI-powered features) | US | |
| Vercel | Application hosting | Server logs, IP addresses, request metadata | US / EU |
International Data Transfers
Some of our sub-processors are located in the United States. For transfers of personal data outside the EU/EEA, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements (DPAs) with each sub-processor
- Additional technical and organizational measures where appropriate
Changes to Sub-Processors
We may update our list of sub-processors from time to time. When we add new sub-processors that process personal data, we will update this page. Significant changes will be communicated via email to our clients.
Questions
If you have questions about our sub-processors or data processing practices, please contact us: