Current subprocessors
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Vercel | Application hosting, edge delivery and serverless compute for the web platform. | Account identifiers, request metadata, content in transit. | United States / global edge network. |
| Supabase | Managed Postgres database, authentication and row-level-security enforcement. | Account and profile data, organisation/team data, simulation content, transcripts, scores and usage records. | Configurable region (Australia / Asia-Pacific where provisioned). |
| Microsoft Azure | Azure OpenAI for AI persona responses and feedback; Azure Speech for speech-to-text and text-to-speech. | Conversation prompts and responses, transient audio and transcript text for processing. | Microsoft Azure regions (Australia / Asia-Pacific where provisioned). |
| Stripe | Subscription billing, payment processing and the hosted customer billing portal. | Billing contact details, subscription and invoice data. Card data is handled directly by Stripe. | United States / global. |
| Resend | Transactional email delivery, including team invitations and account notifications. | Recipient email addresses and invitation/notification content. | United States. |
| Sentry | Application error monitoring and diagnostics, with a privacy scrubber applied before data is sent. | Error events, stack traces and scrubbed diagnostic metadata. Configured to exclude message content and credentials. | United States. |
Changes to this list
We may add or replace subprocessors as the platform evolves. Where required by a customer agreement, we will provide a way to be notified of material changes. To request notification or ask about a specific provider, contact privacy@evolvesimulations.com.
This document is a product-ready draft provided for transparency. It is not legal advice and should be reviewed by qualified legal counsel before being relied upon. If anything here is unclear, contact us and we'll help.