Current subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, CDN, edge network | Request metadata, IP address, logs | United States |
| Neon, Inc. | Managed PostgreSQL - primary database | All Customer Content and account records | United States |
| Stripe, Inc. | Payment processing and subscription billing | Billing contact, payment card data (handled by Stripe, never by us) | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Email address, message content | United States |
| OpenAI, L.L.C. | Large-language-model inference for AI features | Prompt content submitted to AI features | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and reliability | Error traces, request metadata | United States |
Commitments
- Each subprocessor is bound by a written contract imposing the same data-protection obligations we owe you, as required by GDPR Art. 28(4).
- Each is required to maintain confidentiality and security measures appropriate to the data.
- Our model provider is contractually prohibited from using submitted content to train its models.
- We remain fully liable to you for each subprocessor's performance.
- Onward transfers out of the EEA, UK, or Switzerland are covered by the Standard Contractual Clauses and, where applicable, the UK Addendum.
Notice, objection, and updates
We give at least 30 days' advance notice before adding or replacing a subprocessor. Notice goes by email to account administrators and is reflected on this page.
If you object on reasonable data-protection grounds, write to info@dssadvisorygroup.com within the notice period. We will work with you to address the objection. If we cannot, you may terminate the affected part of the Service without penalty and receive a pro-rata refund of prepaid, unused fees.
The managed PostgreSQL provider is identified by role rather than brand until our production hosting contract is finalised. We will name it here, with 30 days' notice, before that arrangement changes.