Sub-processors
Last updated: June 2026
The third parties we rely on to deliver ComplyAgent, and what each one processes.
We engage the sub-processors below to provide the service. Each is bound by data-protection terms and, where data may leave the EEA, by Standard Contractual Clauses (SCCs) with supplementary measures as needed. We will update this list before adding or changing a sub-processor that handles personal data.
| Sub-processor | Purpose | Location / safeguards |
|---|---|---|
| Vercel | Application hosting + CDN | USA (global edge); SCCs in place |
| Supabase | Primary database (Postgres) | EU - Ireland (eu-west-1) |
| Clerk | Authentication + organisation management | USA; SCCs in place |
| Anthropic | LLM for classification + document generation | USA; no training on customer data; SCCs in place |
| Stripe | Payments + subscription billing | USA / Ireland (Stripe Payments Europe); SCCs in place |
| Resend | Transactional email (when enabled) | USA; SCCs in place |
| PostHog | Product analytics (when enabled) | EU - Frankfurt (EU Cloud) |
| Sentry | Error and performance monitoring (when enabled) | EU - Germany (ingest.de.sentry.io) |
Notifications
To be notified of changes to this list, email admin@complyagent.eu and ask to be added to our sub-processor change notices.