Legal Document

Subprocessors

To provide our services, Poliage engages certain third-party service providers ("Subprocessors") who may process personal data on our behalf. This page lists those Subprocessors along with their functions and locations.

Last updated: December 13, 2025

What is a Subprocessor?

A Subprocessor is a third-party data processor engaged by Poliage who may have access to or process personal data. As a data controller, we ensure that all Subprocessors meet strict data protection standards and are bound by appropriate contractual obligations.

SubprocessorService ProvidedLocation
Vercel Inc.
Application hosting, serverless functions, and edge computing infrastructure.
Cloud Hosting & ComputingUSA
Supabase, Inc.
PostgreSQL database hosting and user authentication services.
Database & AuthenticationUSA
Cloudflare, Inc.
File storage for visual assets and content delivery network for global distribution.
Object Storage (R2) & CDNUSA / Global
Upstash, Inc.
Redis-based rate limiting to protect our APIs and caching for performance.
Rate Limiting & CachingUSA
Paddle
Merchant of record handling all payment processing, invoicing, and tax compliance.
Payment ProcessingUK / Global
Resend
Transactional email delivery for notifications and account communications.
Email DeliveryUSA

Data Protection Measures

All Subprocessors are required to maintain appropriate technical and organizational measures to protect personal data. We conduct due diligence before engaging any Subprocessor and require them to enter into data processing agreements that include standard contractual clauses where applicable.

Updates to This List

We may update this list from time to time as we engage new Subprocessors or make changes to our service providers. We recommend checking this page periodically for updates. Significant changes will be communicated through our standard notification channels.

Questions?

If you have any questions about our Subprocessors or data processing practices, please contact us at privacy@poliage.com.