# Profoyo Sub-processors

_Last updated: 2026-05-15_

Profoyo uses the following sub-processors to deliver the service. All sub-processors operate under a Data Processing Agreement (DPA) with Profoyo, and any non-EEA transfers are covered by EU Standard Contractual Clauses (SCCs).

| Sub-processor | Purpose | Region | Transfer safeguard |
|---|---|---|---|
| Supabase (managed PostgreSQL, Auth, Storage, Edge Functions) | Primary database, authentication, file storage, serverless compute | EU (Frankfurt) | EU-only |
| Lovable AI Gateway | AI inference (OpenAI / Google models) for assistants and analysis | EU + US | SCCs + DPA |
| Stripe Payments Europe | Subscription billing | Ireland | EU + SCCs |
| Resend | Transactional email delivery | EU + US | SCCs + DPA |
| ElevenLabs | Voice synthesis (FOx agent) | US | SCCs + DPA |
| GoCardless | Bank account aggregation (open banking) | UK | UK adequacy |
| Sentry | Error and performance monitoring | EU | EU-only |

We notify users of any material change to this list at least 30 days before it takes effect.
