Current Sub-Processors
Under GDPR Article 28, we maintain this list of sub-processors to ensure transparency about how your data is processed. All sub-processors are bound by data processing agreements that require them to protect your data.
| Provider | Purpose | Data Processed | Location | Legal Documents |
|---|---|---|---|---|
| Supabase | Database hosting and file storage | All user data, testimonials, videos, account information | US / EU | |
| Stripe | Payment processing | Payment details, billing information, customer IDs | US | |
| Resend | Email delivery | Email addresses, email content, notification data | US | |
| OpenAI | Content moderation | Testimonial text (for moderation analysis) | US | |
| Google (Gemini API) | AI enhancement features | Testimonial text (for AI-powered features) | US | |
| Vercel | Application hosting | Server logs, IP addresses, request metadata | US / EU |
International Data Transfers
Some of our sub-processors are located in the United States. For transfers of personal data outside the EU/EEA, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements (DPAs) with each sub-processor
- Additional technical and organizational measures where appropriate
Changes to Sub-Processors
We may update our list of sub-processors from time to time. When we add new sub-processors that process personal data, we will update this page. Significant changes will be communicated via email to our clients.
Questions
If you have questions about our sub-processors or data processing practices, please contact us:
Email
privacy@echonext.app