Draft — pending legal review; not yet in force. This document is a working draft prepared for internal review and has not been reviewed or approved by legal counsel. It does not create binding obligations and should not be relied upon until finalized and executed.
Third-party services engaged by Avenor SAS (France) and LBMGB LLC (North Carolina, US), acting as joint data controllers, to process personal data on their behalf (GDPR Art. 28(2)). Last updated March 1, 2026.
| Subprocessor | Purpose | Location | DPA | Transfer mechanism |
|---|---|---|---|---|
| Supabase | Database, Authentication & File Storage | US (AWS us-east-1) | Yes | Standard Contractual Clauses (SCCs) |
| Vercel | Application Hosting & Edge Network | US (AWS), Global CDN | Yes | Standard Contractual Clauses (SCCs) |
| Resend | Transactional Email Delivery | US | Yes | Standard Contractual Clauses (SCCs) |
| Sentry | Error Tracking & Diagnostics | US | Yes | Standard Contractual Clauses (SCCs) |
| PostHog | Product Analytics & Session Recording | EU (Frankfurt) | Yes | EU data residency (no transfer) |
| Meilisearch | Full-Text Search | Self-hosted (US) | N/A | Standard Contractual Clauses (SCCs) |
| Upstash | Redis Cache & Rate Limiting | US | Yes | Standard Contractual Clauses (SCCs) |
| Anthropic | AI Processing (Claude API) | US | Yes | Standard Contractual Clauses (SCCs) |
| Inngest | Background Jobs & Workflow Automation | US | Yes | Standard Contractual Clauses (SCCs) |
| Arcjet | Rate Limiting & Bot Protection | US | Yes | Standard Contractual Clauses (SCCs) |
| Trigger.dev | Workflow Orchestration | US / EU | Yes | Standard Contractual Clauses (SCCs) |
We will notify customers at least 14 days before adding or replacing any subprocessor. If you object to a new subprocessor, you may terminate your subscription in accordance with our Terms of Service.
Last updated: March 1, 2026