Updated June 2026
Subprocessors
NeuDocs uses the third-party services below to operate the product. Each processes customer data only as needed to provide its function. We never sell customer data, and document contents are never sent to a third party for advertising or model training.
| Subprocessor | Purpose | Data handled | Location |
|---|---|---|---|
| Supabase | Managed Postgres database, authentication, and file storage | All application data: organisations, staff accounts, client contact details, document requests, and uploaded files | European Union (Ireland) |
| Vercel | Application hosting and serverless compute (including scheduled jobs) | Request/response data in transit; no documents stored at rest | Global edge; functions run in the EU region |
| Resend | Transactional email (invitations, request links, receipts, alerts) | Recipient email addresses and generic notification text; no document contents | United States |
| Paddle | Payment processing & billing (Merchant of Record — checkout, tax, invoicing) | Billing contact + payment details (held by Paddle, not NeuDocs); no document contents | Global (UK/EU-based) |
Malware scanning runs on infrastructure under our control (self-hosted ClamAV, or a privacy-reviewed scanning API where configured); uploaded files are handled per the Security Overview. We make a reasonable effort to notify customers of material changes to this list.