Sub-processors
Last updated: June 5, 2026
This page lists the third-party processors CORPYO engages to deliver the platform. Customers entitled to advance notice of changes under our Data Processing Agreement (DPA) are notified by email at least 30 days before a new sub-processor begins processing personal data, except where a critical security or availability incident requires faster substitution.
Core Infrastructure
| Vendor | Service | Location | Safeguard | | ------ | ------- | -------- | --------- | | Vercel | Web hosting and edge functions | Global edge, US primary | EU SCCs + UK IDTA, DPF certified | | Cloudflare | DNS, CDN, WAF, DDoS protection | Global edge | EU SCCs + UK IDTA, DPF certified | | AWS | Object storage, secrets, queues, KMS | us-east-1 (primary), eu-west-1, ap-southeast-1 | EU SCCs + UK IDTA, DPF certified | | Neon (or equivalent) | Managed Postgres | eu-central-1, us-east-1 read replica | EU SCCs | | Upstash | Redis (sessions, rate-limit, cache) | eu-west-1, us-east-1 | EU SCCs |
Identity, Payments, Communications
| Vendor | Service | Location | Safeguard | | ------ | ------- | -------- | --------- | | Sumsub | KYC, AML, sanctions / PEP screening, liveness | UK, Cyprus, with Russia data segregation policy | UK IDTA + EU SCCs | | Stripe | Card payments, recurring billing, tax | US, IE | EU SCCs + UK IDTA, DPF certified | | PayPal | Alternative payments | US, LU | EU SCCs | | Resend | Transactional email | US | EU SCCs + UK IDTA, DPF certified | | Twilio (where SMS enabled) | SMS OTP, alerts | US, IE | EU SCCs + UK IDTA |
Observability and Support
| Vendor | Service | Location | Safeguard | | ------ | ------- | -------- | --------- | | Sentry | Error monitoring | US, with EU-region data residency enabled | EU SCCs | | Datadog | Application performance monitoring, logs, SIEM | EU1 region for EU customers | EU SCCs | | Intercom (or equivalent) | Customer support inbox | Dublin, IE | EU intra-region; DPF certified |
Productivity (staff use, not customer-data processors except as noted)
| Vendor | Service | Location | Safeguard | | ------ | ------- | -------- | --------- | | Google Workspace | Email, docs, identity | Global | EU SCCs + UK IDTA, DPF certified | | GitHub | Source code, CI | US | EU SCCs + UK IDTA, DPF certified | | Slack | Internal collaboration | US | EU SCCs + UK IDTA | | 1Password | Staff secrets manager | CA, US | SCCs |
Country Partners (Variable by Order)
For each jurisdiction where you form a company, we engage a licensed local agent. The agent appears on your invoice and in the DPA addendum, and processes your data only for the purpose of executing your filing.
A current partner roster per country is available on request to `privacy@corpyo.com`.
Changes
Material changes to this list are announced in advance by email to the billing contact on file. The audit history of changes is available on request.
Contact: `dpo@corpyo.com`.