Sub-processors
Effective date: 2 July 2026
Cyberheroes VOF (company number BE 0735.783.008) uses the sub-processors listed below to provide the SubAvengers Service. Each sub-processor acts on our documented instructions under a data processing agreement and is bound by confidentiality and security obligations. This page is referenced by our Privacy Policy and DPA.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
Supabase Supabase, Inc. | Authentication and database hosting (core application data) | European Union (EEA) | Data hosted in the EU region — no transfer outside the EEA for hosting |
Netlify Netlify, Inc. | Application hosting, serverless functions and content delivery | United States | EU Standard Contractual Clauses (SCCs) |
Polar Polar Software, Inc. | Subscription billing and payment processing (merchant of record) | United States | EU Standard Contractual Clauses (SCCs) |
Resend Resend, Inc. | Transactional email delivery (verification, password reset, notifications) | United States | EU Standard Contractual Clauses (SCCs) |
Upstash Upstash, Inc. | Rate limiting and abuse protection | United States | EU Standard Contractual Clauses (SCCs) |
Changes to this list
We keep this list up to date. Before adding or replacing a sub-processor that processes personal data, we update this page. Where you act as a controller and we act as your processor, you may object to a new sub-processor on reasonable data-protection grounds as described in our DPA. Questions: privacy@subavengers.com.