Sub-processors
Last updated 19 July 2026
We use the infrastructure providers below to operate Workspace Audit. Each is bound by data-protection obligations equivalent to those in our DPA. We will notify customers of material changes to this list.
| Provider | Purpose | Region |
|---|---|---|
| Vercel Inc. | Application hosting & serverless compute | Global (US-based) |
| Supabase | Database (your scan results & account) | EU (eu-west-1) |
| Google LLC | The Google Workspace APIs we read on your behalf | Global |
Note on Google
Google is both the platform you audit and a sub-processor for the APIs we call. We use only the read-only scopes listed on our Security page.
Subject to final legal review. Stripe (payments) and an email provider (alerts) will be added here when those features launch.