Trust · Sub-processors

The providers that help us run Prosidir.

Every third party that may touch customer data, what it does, and what it handles — the whole list, kept current.
Last updated: 18 July 2026

What a sub-processor is

A sub-processor is a third-party company we rely on to operate Prosidir, and which may process customer data on our behalf. We keep this list current and post material changes here before they take effect. Prosidir’s list is deliberately short — the service runs on a small, named stack.

Supabase

Database, sign-in and file storage

Disciplinary case records, generated documents, hearing recordings and transcripts, uploaded evidence and account details. Access is restricted per workspace with row-level security; recordings and evidence live in private storage.

Vercel

Hosting, content delivery and privacy-preserving site analytics

App traffic and standard request metadata (e.g. IP address, browser) needed to serve and secure the site, plus cookieless page-view counts (Vercel Web Analytics) that do not track you across other sites.

Anthropic

AI reasoning — summaries, document drafting, the fairness checklist and the supported-outcome draft

Case text and hearing transcripts, sent only at the moment of analysis and never used to train AI models.

Google (Gemini)

AI transcription and document reading — hearing audio, scanned documents and photographed evidence

Hearing audio and document images, sent only at the moment of processing. On Prosidir’s paid Google API tier, this content is not used to train Google’s models.

Resend

Email delivery for essential account emails

The recipient’s address and message content for sign-in links and service notices. Never marketing email.

ImprovMX

Inbound email forwarding for prosidir.com addresses

Incoming email to prosidir.com addresses, forwarded to our team inbox. Inbound only.

Paddle

Payment processing (when paid plans are live) — merchant of record

Checkout and billing details. Prosidir never sees or stores card numbers.

Questions

A Data Processing Agreement (DPA) covering these sub-processors is available to customers on request — see the DPA page. For questions about how your data is handled, get in touch.

Contact us