Sub-processors
The third parties Disclarion engages to run the Service, and what each one does. This list is referenced from our Data Processing Agreement.
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Database hosting and authentication | Account, billing, and interaction-log data | EU (eu-west-1, Ireland) |
| Railway | Landing page and backend API hosting | Application runtime only — no persistent customer data storage | EU (europe-west4) |
| Vercel | Dashboard hosting | Application runtime only — no persistent customer data storage | US (iad1) for serverless functions today. EU (Dublin) is configured but not yet active, pending a plan upgrade that supports region selection. Edge middleware, which handles session cookies, always runs on Vercel's global edge network rather than a fixed region, regardless of plan. Static assets are served from Vercel's global CDN. |
| Stripe | Payment processing | Billing and payment data (Disclarion never receives full card numbers) | US. Billing data may be processed outside the EU under Standard Contractual Clauses / EU-US Data Privacy Framework. |
| Zoho Mail | Human correspondence to hello@disclarion.com | Contact-form submissions and any direct replies | EU |
| ZeptoMail | Transactional email sent by the app (contact-form notifications, scanner results) | Recipient address and the generated email content | EU |
| Zoho Desk | Customer support ticketing | Support communications | EU |
We'll update this page before adding or replacing a sub-processor. Questions about this list can be sent to hello@disclarion.com.