Sub-processors
Last updated August 2026
Equillis engages the third parties below to deliver the service. Each is bound by a written data-processing agreement no less protective than our own, and Equillis remains liable for their performance. Customers on an active subscription receive at least 30 days' notice before a sub-processor is added or replaced.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Managed Postgres database, authentication and file storage | Account records, saved sites, lanes, schedules, audit log | European Union (Ireland) / United Kingdom |
| Cloudflare | Application hosting, edge delivery, TLS termination and DDoS protection | Request metadata and IP addresses in transit; no customer records at rest | Global edge network; UK/EU points of presence for UK traffic |
| Stripe Payments Europe | Subscription billing and payment processing | Billing contact, subscription status. Card data is captured by Stripe and never reaches Equillis | European Union / United States (SCCs + UK IDTA) |
| Resend | Transactional and alert email delivery | Recipient email address, message content of briefings and alerts | European Union / United States (SCCs + UK IDTA) |
Not sub-processors
- Open police-recorded crime data is public source data, not customer data, and its publisher is not a sub-processor.
- Map tiles and road geometry are served as static assets and carry no customer data.
Change notification
To be notified of changes, email Henry@equillis.com with the subject "Sub-processor notice" and the address to add. Objections on reasonable data-protection grounds are handled under the Data Processing Addendum.