Subprocessor register
UK GDPR Art 28 · Last updated May 2026 · Hypernest Innovations Limited
We use the following subprocessors to operate EnforceIQ Labs. EU/UK hosting is preferred where available. Fleet customers are notified of material changes under the fleet DPA.
| Provider | Purpose | Data | Region | Tier |
|---|---|---|---|---|
| Vercel | Hosting, CDN, serverless API | IP, request metadata, deployment logs | EU preferred | Critical |
| Neon | PostgreSQL database | All tenant application data | EU (Frankfurt / London) | Critical |
| Clerk | Authentication & org directory | Email, name, Clerk IDs | US/EU per project | Critical |
| Stripe | Billing & subscriptions | Customer ID, payment metadata (no card PAN in EnforceIQ) | EU/US per account | High |
| Resend | Transactional email (opt-in reminders) | Email, notice references in templates | US/EU per account | High |
| Amazon Web Services S3 | Private notice uploads | Photos, PDFs, object metadata | EU (eu-west-2 recommended) | Critical |
| Upstash | Rate limits, cache, webhook idempotency | Org IDs, hashed keys (ephemeral) | EU option | Medium |
Optional providers
| Provider | Purpose | When used |
|---|---|---|
| Sentry | Error monitoring (analytics cookie only) | Only after you accept analytics cookies |
Full legal register (DPAs, transfer mechanisms, onboarding checklist): maintained in EnforceIQ Labs compliance documentation pack (GDPR-01). Questions or DPA copies: [email protected]