Legal
Subprocessors
Who helps us run Dueclear, and what they can see.
Draft for legal review. This text is a working draft prepared from standard EU templates. It is not yet approved and does not apply until this banner is removed. Items in [brackets] are still to be filled in.
These companies help us run Dueclear and may process personal data on our behalf. Each is bound by a data processing agreement with terms at least as protective as ours. We tell workspace owners by email 30 days before adding or replacing one, so they can object.
| Company | What for | Where | Data | Privacy |
|---|---|---|---|---|
| Supabase Inc. | Database, sign-in and file storage | EU (Frankfurt, Germany), on Amazon Web Services | Account details, the register, certificates and history | supabase.com/privacy |
| Cloudflare, Inc. | Website hosting, network security, cookie-free visitor statistics | Global network; EU data localisation where available | IP address and technical request data | cloudflare.com/privacypolicy |
| Stripe Payments Europe, Ltd. | Payments, invoices, VAT | Ireland (EU); Stripe group in the US under the EU-US Data Privacy Framework | Billing contact, company and payment details | stripe.com/privacy |
| [Email provider, to be chosen] | Sending reminders and sign-in emails | [EU region] | Email address, name, message content | [link] |
What is not on this list
Reading dates from certificates happens in your browser with open-source software (pdf.js). No AI service receives your documents.
Last updated 11 November 2026. Draft version.