Subprocessors
Rivoryn Limited uses the following subprocessors to deliver ConsentSignals. Paid customers may request updates via our Data Processing Agreement. Contact privacy@consentsignals.com for subprocessors notifications.
Clerk
- Purpose:
- Authentication and user identity
- Location:
- United States / EU (configurable)
- Data processed:
- Email, user ID, session tokens
Stripe
- Purpose:
- Subscription billing and payments
- Location:
- United States / EU
- Data processed:
- Billing email, payment method metadata, subscription status
Supabase
- Purpose:
- PostgreSQL database hosting (EU region)
- Location:
- European Union
- Data processed:
- Scan metadata, findings, user account records
Vercel
- Purpose:
- Frontend hosting and CDN
- Location:
- Global (primary EU for production)
- Data processed:
- HTTP request logs, static assets
Resend
- Purpose:
- Transactional email delivery
- Location:
- United States
- Data processed:
- Recipient email, scan completion notifications
Anthropic / OpenAI (LLM provider)
- Purpose:
- Plain-language explanations of findings (paid scans)
- Location:
- United States
- Data processed:
- Redacted finding summaries — no full page HTML stored by default
Cloud / VPS provider (worker)
- Purpose:
- Playwright scan workers and Redis queue
- Location:
- European Union (operator-configured)
- Data processed:
- URLs scanned, transient browser session data during scan
Last updated: June 2026. We will notify DPA customers of material changes.