PROCESSORS
Sub-processors
Auditus.ai uses the following sub-processors to deliver the platform. Each is bound by a Data Processing Agreement consistent with GDPR Art. 28 and our security commitments. Material changes to this list are announced at least 30 days in advance via email to billing contacts.
| Sub-processor | Purpose | Data accessed | Region | DPA |
|---|---|---|---|---|
| Vercel, Inc. | Application hosting + edge network + cron triggers. | Request metadata, IP addresses (90-day logs). | United States · EU (eu-west-1) regional functions where requested | View |
| Neon, Inc. | Primary PostgreSQL database hosting. | All persisted data — users, orgs, engagements, findings, invoices. | United States (us-east-2) · EU branch available on Enterprise tier | View |
| Anthropic, PBC | Claude LLM for the document analyzer and explain-in-plain-English features. | Document text submitted to the analyzer (no training on customer data). | United States | View |
| Stripe, Inc. | Subscription billing + payment processing. | Customer name, email, billing address, payment method (PCI-DSS scope held by Stripe). | United States · Ireland (EU) | View |
| Resend | Transactional email delivery (sign-up, invoices, weekly digest, feedback alerts). | Recipient email, subject, body content of outbound emails. | United States | View |
| Twilio Inc. | WhatsApp notifications (opt-in only). | Phone number, message content of opt-in users. | United States · Ireland (EU) | View |
| Vercel Blob | Storage for uploaded documents and rendered PDF reports. | File contents, file metadata. | United States · EU regional storage on request | View |
Questions about a sub-processor or to request prior notice of changes: ceo@theupcapital.com.