Sub-processor list
List of third parties that process personal data on our behalf in connection with providing Pritect.ai.
Version 1.0Effective: 1 Feb 2026
| Number | Sub-processor | Service | Purpose | Location |
|---|---|---|---|---|
| 1 | Supabase (Supabase, Inc.) | Backend-as-a-Service (BaaS) | Primary application database storing customer tenant data and user records, authentication and session management, file storage for uploaded evidence and attachments, and edge functions powering server-side workflows | Ireland, EU |
| 2 | Vercel (Vercel Inc.) | Frontend Hosting & Content Delivery | Global hosting and content delivery of the Pritect.ai web application via Vercel's edge network, plus performance monitoring (Speed Insights) | San Francisco, CA, USA |
| 3 | Resend (Resend Inc.) | Transactional Email | Primary email service for notifications, assessment invitations, training reminders, DSR notifications, workflow alerts | San Francisco, CA, USA |
| 4 | Mistral AI (Mistral AI SAS) | Large language and speech models | AI-powered features: Country risk chat & summaries, governance assistance, certification evidence analysis, support triage, role AI wizard, ROPA onboarding assistant, security controls advisor, roadmap optimization, contract review and contract document OCR, contract obligation extraction, NDA triage, legal matter risk analysis, supplier questionnaire triage and supplier risk classification, and in Speak Up (whistleblowing): report intake screening (classification, translation and a draft acknowledgement), voice report transcription (Voxtral), report form pre-fill from a voice transcript, and case summary and interview question drafting | France, EU |
| 5 | Mapbox (Mapbox, Inc.) | Maps & Geocoding | Transfer route map in transfer impact assessments (TIA) | San Francisco, CA, USA |
| 6 | Friendly Captcha (Friendly Captcha GmbH) | Captcha | Program code designed to make it more difficult for automated programs and scripts (bots) to use Pritect.ai | Germany, EU |
| 7 | Better Stack (Better Stack s.r.o.) | Status page hosting | Public status page hosting and incident notification for status.pritect.ai. Processes visitor IP addresses logged on page access and email addresses voluntarily submitted by status-update subscribers. Does not access customer application data, tenant content, or user records. | Germany, EU |
| 8 | Mailgun (Mailgun Technologies, Inc.) | Inbound and outbound email | Receiving Speak Up (whistleblowing) reports sent by email to an organisation's dedicated intake address, including the sender's address, message content and attachments, and sending personal data breach notification emails | EU (Mailgun EU region) |
- #1
Supabase
(Supabase, Inc.)
- Service
- Backend-as-a-Service (BaaS)
- Purpose
- Primary application database storing customer tenant data and user records, authentication and session management, file storage for uploaded evidence and attachments, and edge functions powering server-side workflows
- Location
- Ireland, EU
- #2
Vercel
(Vercel Inc.)
- Service
- Frontend Hosting & Content Delivery
- Purpose
- Global hosting and content delivery of the Pritect.ai web application via Vercel's edge network, plus performance monitoring (Speed Insights)
- Location
- San Francisco, CA, USA
- #3
Resend
(Resend Inc.)
- Service
- Transactional Email
- Purpose
- Primary email service for notifications, assessment invitations, training reminders, DSR notifications, workflow alerts
- Location
- San Francisco, CA, USA
- #4
Mistral AI
(Mistral AI SAS)
- Service
- Large language and speech models
- Purpose
- AI-powered features: Country risk chat & summaries, governance assistance, certification evidence analysis, support triage, role AI wizard, ROPA onboarding assistant, security controls advisor, roadmap optimization, contract review and contract document OCR, contract obligation extraction, NDA triage, legal matter risk analysis, supplier questionnaire triage and supplier risk classification, and in Speak Up (whistleblowing): report intake screening (classification, translation and a draft acknowledgement), voice report transcription (Voxtral), report form pre-fill from a voice transcript, and case summary and interview question drafting
- Location
- France, EU
- #5
Mapbox
(Mapbox, Inc.)
- Service
- Maps & Geocoding
- Purpose
- Transfer route map in transfer impact assessments (TIA)
- Location
- San Francisco, CA, USA
- #6
Friendly Captcha
(Friendly Captcha GmbH)
- Service
- Captcha
- Purpose
- Program code designed to make it more difficult for automated programs and scripts (bots) to use Pritect.ai
- Location
- Germany, EU
- #7
Better Stack
(Better Stack s.r.o.)
- Service
- Status page hosting
- Purpose
- Public status page hosting and incident notification for status.pritect.ai. Processes visitor IP addresses logged on page access and email addresses voluntarily submitted by status-update subscribers. Does not access customer application data, tenant content, or user records.
- Location
- Germany, EU
- #8
Mailgun
(Mailgun Technologies, Inc.)
- Service
- Inbound and outbound email
- Purpose
- Receiving Speak Up (whistleblowing) reports sent by email to an organisation's dedicated intake address, including the sender's address, message content and attachments, and sending personal data breach notification emails
- Location
- EU (Mailgun EU region)
Updates to this list
We update this list when we add, replace, or materially change our sub-processors.