Subprocessors
Subprocessors
The services that handle customer data for TieProof: what each does, what it holds, where, and under which terms. Today they serve the staging environment; the production region is not chosen yet.
Draft for the founders' review. This page is not yet approved and is not yet in force. Each passage in square brackets is for the founders to write. Drafted on 7 November 2026.
Google Cloud
- What it does
Runs the API and the worker that checks the files, the queue and the scheduled jobs, and stores the uploaded files, the services' secrets and their logs.
- What it holds
Uploaded files, until their retention ends, and log lines that hold no file content.
- Where
Staging: us-east4, northern Virginia, United States.
- Terms
The Google Cloud Platform terms, which incorporate the Cloud Data Processing Addendum, with the Standard Contractual Clauses for transfers from the European Union, the United Kingdom and Switzerland.
Supabase
- What it does
Identity, through Supabase Auth, and the database, PostgreSQL, that holds every product record.
- What it holds
Accounts: email addresses, password hashes and sessions. Organizations, projects, checks, findings, their evidence excerpts and the audit log.
- Where
Staging: Amazon Web Services us-east-1, northern Virginia, United States.
- Terms
Supabase's terms. Its Data Processing Addendum binds only once signed, and it is not signed yet.
Vercel
- What it does
Serves the web app's pages.
- What it holds
No product data at rest: each page reads the API for its request. The request logs of the web app.
- Where
Its edge network. The region where pages are rendered is not set yet.
- Terms
Vercel's terms. Its Data Processing Addendum covers its paid plans; the staging project's plan has none.
Not engaged yet
Each of these joins the list before it receives any customer data, with what it holds, where, and its terms.
- Email
A provider that sends confirmations, invitations and notices.
- Payments
Stripe or PayPal, once payments open.
- Status page
A hosted page of the service's status and incidents.
- AI models
Google Cloud's Vertex AI, for Anthropic's Claude models, once external AI is added, under terms that bar training on customer data.
Changes to this list
A change is published on this page with its date. Notice of a change: [how much notice a change is given].