Sub-processor Register
Version 2026-08-09. These are the sub-processors Vouli IQ engages to deliver the service. Each is bound by data-protection terms no less protective than our Data Processing Agreement. We notify customers before engaging a new sub-processor.
| Sub-processor | Purpose | Region / safeguard |
|---|---|---|
| Vercel | Application hosting & edge delivery | Per org hosting region |
| Supabase | Managed Postgres database & storage | Per org hosting region |
| Clerk | Authentication & user identity | United States (SCCs) |
| Resend | Transactional & notification email | United States (SCCs) |
| Sentry | Error & performance monitoring (PII masked) | United States (SCCs) |
| PostHog | Product analytics (consent-gated, de-identified) | EU/US (SCCs) |
| Dodo Payments | Payments & subscriptions (merchant of record) | Per the Dodo Payments DPA (merchant of record) |
| Anthropic | LLM inference under no-training contractual terms | United States (SCCs) |
| OpenAI | LLM inference under no-training contractual terms | United States (SCCs) |
| Cohere | LLM re-ranking for retrieval (RAG); PII redacted before egress | United States (SCCs) |
No customer assessment content or strategy data is used to train any third-party model. LLM providers process data only to return the requested output, under contractual no-training terms.
Contact
privacy@vouliiq.com