Legal
Subprocessors
Entities that process data on our behalf. The list is current as of the date given below and changes together with that date.
Last updated: 21 August 2026
| Entity | Role | What data | Where |
|---|---|---|---|
| Supabase | Database and file storage | Requests from the form, documents provided for an audit | European Union, Frankfurt |
| Vercel | Application hosting | Technical request data, logs | European Union and United States |
| Resend | Sending transactional email | Email address and content of the request notification | European Union and United States |
Changes to the list
We notify clients covered by a data processing agreement of any new subprocessor 30 days in advance. If you do not agree to a new subprocessor, you may terminate the agreement within that period without consequences.
What is not here
We do not use external language model providers to process the content of requests or client documents. If that changes, the provider and region will appear on this list before we start using it.
Questions
Write to arlets@yesfor.ai.