SUBPROCESSORS
Everyone who touches the service.
The complete list of subprocessors we use to run VendorBenchmark, what each one does, and what data it handles. Last updated July 10, 2026.
Current subprocessors
| Subprocessor | Purpose | Data touched |
|---|---|---|
| Supabase | Database and private file storage (Postgres, storage buckets), encrypted at rest | Contract documents, application data |
| Vercel | Application hosting and edge network | Application traffic |
| Anthropic | AI model API (Claude) called server side for AI features; API data is not used to train models | Contract text sent at request time for AI features |
| Resend | Transactional email delivery | Recipient name and email, notification content |
| Upstash | Rate limiting (Redis) | Request counters keyed by user or IP, no document content |
We notify customers before adding a subprocessor that touches contract data. Questions to info@redresscompliance.com.
The marketing site runs on Cloudflare Pages and never touches customer data.