Data protection & compliance

Sub-processors

Last updated: April 2026

Uptrue uses the following third-party sub-processors to deliver and support the platform. Each sub-processor has been assessed for compliance with data protection legislation (including GDPR and UK GDPR) and is bound by appropriate data processing agreements.

Supplements our Data Processing Agreement and GDPR Compliance page.

Infrastructure and Hosting

Supabase (AWS)Frankfurt, Germany (EU)

Primary database, authentication, real-time subscriptions, file storage

VercelGlobal (edge), primary EU

Application hosting, edge functions, cron jobs, CDN

Payment Processing

StripeUnited States (with EU SCCs)

Payment processing, subscription billing, invoicing

RazorpayIndia

Payment processing for India-based customers

Communication and Alerts

ResendUnited States (with EU SCCs)

Transactional email delivery (alerts, notifications, reports)

TwilioUnited States (with EU SCCs)

SMS, WhatsApp, and voice call alerts

ElevenLabsUnited States (with EU SCCs)

AI voice generation for voice call alerts

AI and Intelligence

Anthropic (Claude)United States (with EU SCCs)

AI-generated report summaries, score analysis, competitive intelligence

Monitoring and Error Tracking

SentryUnited States (with EU SCCs)

Application error tracking and performance monitoring

DNS and Domain Services

CloudflareGlobal

DNS queries for domain and DNS monitoring checks

Authentication

Google (OAuth)United States (with EU SCCs)

Social login and admin authentication

Changes to Sub-processors

We will update this page when we add or remove a sub-processor. If you have entered into a Data Processing Agreement with us that includes a notification obligation, we will notify you by email at least 30 days before engaging a new sub-processor that processes personal data.

privacy@uptrue.io