Last updated: June 2025 · Changes notified per our DPA
Supplira uses the following third-party subprocessors to provide the Service. All subprocessors are bound by data protection obligations consistent with GDPR requirements. Customers who have signed a Data Processing Agreement with Supplira are covered by the general authorisation described in that agreement.
We will provide at least 30 days' advance notice of material changes to this list. To be notified of changes, contact privacy@supplira.io.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Primary application database hosting (PostgreSQL via Supabase on AWS eu-north-1) | Sweden (EU) |
| Vercel Inc. | Application hosting and edge delivery | USA / global edge (EU routing where available) |
| Supabase Inc. | Managed PostgreSQL database service | AWS eu-north-1 (Sweden) |
| Subprocessor | Purpose | Location |
|---|---|---|
| Resend Inc. | Transactional email delivery (assessment invitations, reminders, account emails) | USA (EU processing available) |
| Subprocessor | Purpose | Location |
|---|---|---|
| Cloudflare Inc. | Turnstile CAPTCHA for signup protection; CDN and DDoS protection | USA / global edge |
For questions about subprocessors or data handling, contact privacy@supplira.io. For the full Data Processing Agreement, see the DPA page.