Legal
Subprocessors
These are the third parties Complaix uses to deliver the service. We enter into a written DPA with each vendor on the list and review the list at least once per quarter.
Subscribe to updates at /subprocessors.rss. Contract requirements in our DPA (Article 28(2)) give our customers at least 30 calendar days to object to any new subprocessor before we route their data through it.
| Vendor | Purpose | Data categories | HQ | Transfer | Added |
|---|---|---|---|---|---|
| Anthropic PBC | AI-assisted document field extraction (uploaded technical documents) | Uploaded document text during processing | USA | SCCs + EU–US Data Privacy Framework | 2026-04-15 |
| Brevo (Sendinblue) | Transactional email (Supabase Auth + invitation + approval emails) | Email addresses, Email body contents | Paris, France | Intra-EU | 2026-04-01 |
| BetterStack | Public status page + uptime monitoring (metadata only) | HTTP status responses, URL paths of monitored endpoints | Prague, Czech Republic | Intra-EU | 2026-05-07 |
| GitHub, Inc. | Source-code hosting + CI (no customer data in repositories) | Application source code only | USA | SCCs + EU–US Data Privacy Framework | 2026-04-01 |
| Sentry (Functional Software, Inc.) | Error monitoring and application performance management | Stack traces, Redacted error context, User ids | USA (EU data residency available) | SCCs + EU–US Data Privacy Framework | 2026-05-07 |
| Stripe Payments Europe, Ltd. | Payment processing for subscription billing | Billing-contact email, Payment-instrument metadata (handled by Stripe), Invoice amounts | Dublin, Ireland | Intra-EU | 2026-04-08 |
| Supabase Inc. | Managed PostgreSQL, authentication, and object storage (EU region) | All customer-data tables, Auth records, Evidence vault objects | USA (EU data residency enabled) | SCCs + EU–US Data Privacy Framework | 2026-04-01 |
| Upstash Inc. | Rate-limit counter storage (serverless Redis) | Client IP addresses (short-lived, per rate-limit window), Action-type labels | USA (EU region available) | SCCs | 2026-05-07 |
| Vercel Inc. | Application hosting, CDN, and product analytics (post-consent) | HTTP requests/responses, Page-view events (anonymised) | USA | SCCs + EU–US Data Privacy Framework | 2026-04-01 |
Change log
2026-05-07
Added BetterStack (status page), Sentry (error monitoring, EU region), and Upstash (rate-limit). First published version of this subprocessor register.