Effective · 04 Jul 2026v1.0Updated · 04 Jul 2026 UTC
ENES · soon
Sub-processors
About this list
We engage the third parties below to help us run Dossova. Customer data rests only inside the EU. Exactly two of these are used for data in transit — OpenRouter (customer content to the frontier model on a zero-retention route) and Vercel (front-end hosting, no data at rest) — and both operate under Standard Contractual Clauses (SCC) and a Data Processing Agreement.
Sub-processor register
| Sub-processor | Role | Data | Region | At rest here? | Transfer mechanism |
|---|---|---|---|---|---|
| Neon | Primary Postgres — accounts, SKUs, generations, documents, entitlement, payments, consent, audit log | All customer personal data + business data | EU | Yes | None (EU → EU) |
| Qdrant Cloud | Vector knowledge base (regulatory_text · recall_corpus · opss_guidance) | No customer personal data — public regulatory corpus only | EU | Yes | None (EU → EU) |
| Upstash Redis | Job broker + session / entitlement cache | Personal data in job payloads + session cache (ephemeral) | EU | Yes | None (EU → EU) |
| Cloudflare R2 | Durable PDF store (10-year) + uploaded photos (short retention, purged after generation) | Generated documents, uploaded photos | EU (jurisdiction=EU) | Yes | None (EU → EU) |
| Stripe | Checkout, billing and webhooks (EUR presentment) | Email + payment metadata (minimal personal data) | EU entity + DPA | Yes | Stripe DPA + SCC (Stripe-side transfers) |
| Resend | Transactional email (magic-link, durable-medium document copy) | Email + document-download link | EU-DPA | Yes | Resend DPA |
| OpenRouter (frontier providers: Anthropic, OpenAI, Google, Mistral) | Frontier LLM / Vision / embeddings on a zero-retention route | Customer content in transit only (product data, photos) — no-training, zero-retention | US transit | No — transit only | SCC + DPA; per-request zero-data-retention + provider allowlist |
| Vercel | Next.js front hosting (server components + static + edge cache) | Personal data in transit only (TLS, ephemeral) | US edge | No — transit only | SCC + DPA |
| Grafana Cloud | Observability (metrics / traces / logs) | Redacted telemetry — no personal data, customer content or tokens | EU | Yes | None (EU → EU) |
| Sentry | Error grouping / alerting | Redacted error metadata — no personal data or customer content | EU-DSN | Yes | None (EU → EU) |
International transfers
All customer data is stored at rest in the EU. The only transfers outside the EU are to OpenRouter and Vercel, both in transit only and both covered by the EU Standard Contractual Clauses and a Data Processing Agreement. The knowledge base held at Qdrant contains public regulatory text only — no personal data.
Changes to the list
How we notify you
We keep this register current. Before we add or replace a sub-processor that handles personal data, we update this page and, where the Data Processing Agreement requires it, give you advance notice so you can object.