Draft — under legal review
Sub-processors
- Version
- 0.1-draft
- Updated
- Effective
- Not set (draft)
This is the complete list of services that receive personal data from the MoatDefender app. We give 30 days' notice by email to business customers before adding or replacing one; you can object under the DPA.
| Sub-processor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Hosting, request handling, logs | All app traffic, IP, user agent | EU (Stockholm functions) / global edge | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| Supabase Inc. | Database and file storage | Account, material facts, readings, shares; uploaded deck files until they are read (at most 48 hours) | EU (Stockholm) | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| Anthropic PBC | AI model processing for readings and explanations | Submitted material or facts extracted from it | USA | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| OpenAI | AI model processing for readings and quality checks | Facts extracted from submitted material | USA | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| TypeSafe, Inc. | AI decision-model processing for readings and content checks | Facts extracted from submitted material; short post text for content checks | USA | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| Resend | Email delivery | Email address, message content | USA | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
| Stripe | Payments, once payments are live | Payment and billing details | EU / USA | EU–US Data Privacy Framework or Standard Contractual Clauses (details on request) |
Transfers. For each provider outside the EU/EEA we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. Details for a specific provider are available on request at privacy@moatdefender.com.
Model data use. Anthropic, OpenAI and TypeSafe retain the data they receive according to the provider's standard terms.