Subprocessor List
Last updated: July 2026
EuroComply uses the following sub-processors to provide its service. All sub-processors are contractually bound to process data only as instructed and in compliance with GDPR. This list is updated when sub-processors change.
| Sub-processor | Purpose | Country | Data type processed |
|---|---|---|---|
| Supabase | Database and authentication | Germany (Frankfurt) | All user and compliance data |
| Vercel | Application hosting and edge runtime | EU region (primary); US CDN edge for static assets | Request logs, static assets |
| Mistral AI | AI inference (compliance assistant, document generation) | France (Paris) | Prompt content, generated output |
| Microsoft Clarity | Session analytics and heatmaps | Ireland (EU) | Anonymised interaction data (no cookies by default) |
| Google Analytics 4 | Web analytics | Ireland (EU) | Anonymised pageview data (with cookie consent) |
| SendPulse | Transactional email delivery | United States (Standard Contractual Clauses) | Email address, email content |
| Polar | Merchant of record — data-product payments, invoicing, EU VAT | United States (Standard Contractual Clauses) | Purchaser name, email, billing details for one-time purchases — no workspace data is involved |
Vercel routes static assets through a global CDN including US edge nodes. Regulated user data (database, AI inference, auth) does not transit these nodes. See our Privacy Policy for details.
Last updated: July 2026