Last updated: October 16, 2025
We engage the following service providers as sub‑processors to support hosting, infrastructure, authentication, storage, and AI functionality. Each processes personal information on our behalf under contractual obligations, including confidentiality and data protection commitments.
Vercel, Inc.
- Role: Hosting, CDN, build/deploy platform
- Primary locations: EU/US (regions vary by deployment configuration)
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; or Data Privacy Framework where applicable
Supabase
- Role: Database, authentication, storage
- Primary locations: Region selected during project setup (EU/US options); backups may be regional
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; regional hosting where available
OpenAI
- Role: AI inference for application features
- Primary locations: US/EU depending on API configuration and model availability
- Transfer mechanism: EU Standard Contractual Clauses; UK IDTA/Addendum; Swiss adaptations; or Data Privacy Framework where applicable
We implement supplementary safeguards (e.g., encryption in transit and at rest, access controls, data minimization). We will update this list if we add or replace sub‑processors for relevant services.
Questions? Contact info@mavr.app.