Sub-processors
Last updated: April 2026
Uptrue uses the following third-party sub-processors to deliver and support the platform. Each sub-processor has been assessed for compliance with data protection legislation (including GDPR and UK GDPR) and is bound by appropriate data processing agreements.
This page supplements our Data Processing Agreement and GDPR Compliance page.
Infrastructure and Hosting
| Sub-processor | Purpose | Data Location |
|---|
| Supabase (AWS) | Primary database, authentication, real-time subscriptions, file storage | Frankfurt, Germany (EU) |
| Vercel | Application hosting, edge functions, cron jobs, CDN | Global (edge), primary EU |
Payment Processing
| Sub-processor | Purpose | Data Location |
|---|
| Stripe | Payment processing, subscription billing, invoicing | United States (with EU SCCs) |
| Razorpay | Payment processing for India-based customers | India |
Communication and Alerts
| Sub-processor | Purpose | Data Location |
|---|
| Resend | Transactional email delivery (alerts, notifications, reports) | United States (with EU SCCs) |
| Twilio | SMS, WhatsApp, and voice call alerts | United States (with EU SCCs) |
| ElevenLabs | AI voice generation for voice call alerts | United States (with EU SCCs) |
AI and Intelligence
| Sub-processor | Purpose | Data Location |
|---|
| Anthropic (Claude) | AI-generated report summaries, score analysis, competitive intelligence | United States (with EU SCCs) |
Monitoring and Error Tracking
| Sub-processor | Purpose | Data Location |
|---|
| Sentry | Application error tracking and performance monitoring | United States (with EU SCCs) |
DNS and Domain Services
| Sub-processor | Purpose | Data Location |
|---|
| Cloudflare | DNS queries for domain and DNS monitoring checks | Global |
Authentication
| Sub-processor | Purpose | Data Location |
|---|
| Google (OAuth) | Social login and admin authentication | United States (with EU SCCs) |
Changes to Sub-processors
We will update this page when we add or remove a sub-processor. If you have entered into a Data Processing Agreement with us that includes a notification obligation, we will notify you by email at least 30 days before engaging a new sub-processor that processes personal data.
If you have questions about our sub-processors, please contact us at privacy@uptrue.io.