SUB-PROCESSORS
LAST UPDATED: APRIL 14, 2026
Briefance (https://briefance.com) uses the third parties listed below to operate the service. Each is contractually bound by a Data Processing Addendum (DPA) and may process personal data only on our documented instructions. We review this list whenever we add, remove, or change a sub-processor and notify active users at least 15 days before any material change.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Supabase | Managed Postgres, authentication, file storage | Account data, briefs, proposals, uploaded files | European Union (Frankfurt) |
| Anthropic (Claude API) | AI generation of briefs, questions, and proposals | Client messages, generated briefs and proposals (transit only) | United States (SCCs + DPA) |
| Vercel | Application hosting and edge delivery | HTTP request metadata, IP address (ephemeral logs) | United States / European Union |
| Upstash | Rate-limit counters (Redis) | User ID hash, request counts (no message content) | European Union (Frankfurt) |
| LemonSqueezy | Merchant of Record, payment processing, VAT/sales-tax | Name, email, billing address, payment card (tokenised), invoice history | United States (SCCs + DPA) |
| Resend | Transactional email delivery | Email address, email body (transit only) | European Union |
| Sentry | Error monitoring and performance tracing | Stack traces, URL path, user ID hash (PII is scrubbed pre-send) | European Union (sentry.io EU region) |
| Microsoft Clarity | Product analytics (loaded only with consent) | Anonymised interaction data, device type | United States |
CROSS-BORDER TRANSFERS
Transfers to sub-processors outside the European Economic Area or Türkiye are protected by the European Commission's Standard Contractual Clauses (2021/914) and the sub-processor's own technical and organisational measures. For Türkiye-based users, these transfers are also carried out in accordance with KVKK Art. 9 (açık rıza veya yeterlilik/taahhütname mekanizmaları).
QUESTIONS OR DPA REQUEST
Email info@thecodevolt.com for a copy of our Data Processing Addendum or to raise any concern about a specific sub-processor.