Trust
Subprocessors
This table describes current infrastructure and billing providers used to operate GPCGuard. It is not a full negotiated DPA schedule for enterprise customers.
| Provider | Role | Data categories | Notes |
|---|---|---|---|
| Supabase | Database, authentication, storage, and edge-function hosting | Account data, site configuration, API keys, decision records, hashed identifiers | Hosted in the configured Supabase project region; enterprise review available on request. |
| Vercel | Dashboard hosting, application delivery, and CDN | Dashboard requests, public marketing pages, application logs and metadata | Routing depends on Vercel platform behavior and customer location. |
| Stripe | Payment processing, subscription billing, and billing portal | Billing contact information, payment metadata, subscription status | Used only for paid plan billing and related customer account state. |
Current Limitations
- This page does not claim a formal subprocessor notice period for self-serve plans.
- Enterprise customers can negotiate subprocessor notice, objection, and audit terms in a signed agreement.
- Internal development tools are not listed here unless they process customer service data.