Subprocessors
Effective: February 24, 2026Version 1.0
Overview
Ataraxia GRC uses the following third-party subprocessors to provide the Service. This list is maintained in accordance with our Data Processing Agreement. We will provide at least 30 days’ notice before adding or replacing a subprocessor.
Current Subprocessors
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase (AWS) | Database, Authentication | Account data, assessment data | US |
| Vercel | Hosting, CDN | Request data, page content | US / Global |
| Anthropic | AI Processing | Assessment context (via API) | US |
| Stripe | Payment Processing | Payment data, billing info | US |
| Cloudflare | DNS, Security, CDN | Request metadata | US / Global |
| Resend | Email Delivery | Email addresses, email content | US |
Change Notification
This list is updated when subprocessors are added, removed, or replaced. Enterprise customers with a signed Data Processing Agreement will receive at least 30 days’ advance written notice of any changes.
To receive notifications of subprocessor changes, contact privacy@ataraxiagrc.com.
Questions
For questions about our subprocessors or data processing practices, contact us at privacy@ataraxiagrc.com.