Conformant — Sub-processors snapshot (informational)
====================================================

Live list (authoritative):
  https://conformant.eu/subprocessors

Providers that may process personal data to run Conformant:

1. Clerk
   Purpose: Authentication, organization membership, session management
   Location: United States / EU — SCCs or equivalent where required
   https://clerk.com

2. Supabase
   Purpose: PostgreSQL database and file storage for workspace data (EU region)
   Location: European Union
   https://supabase.com

3. Stripe
   Purpose: Subscription billing and payment processing
   Location: United States / EU — SCCs or equivalent where required
   https://stripe.com

4. Resend
   Purpose: Transactional email (welcome, reminders, contact confirmations)
   Location: United States — SCCs or equivalent where required
   https://resend.com

5. Anthropic
   Purpose: Compliance Advisor AI inference on sanitized workspace snapshots
   Location: United States — SCCs or equivalent where required
   https://www.anthropic.com

6. Vercel
   Purpose: Application hosting and edge delivery
   Location: European Union / United States — SCCs or equivalent where required
   https://vercel.com

Material changes are reflected on the live Sub-processors page.

Last updated: July 2026
