Sub-processors
Who processes data on our behalf, and where
Last updated 10 September 2026
Current sub-processors
These are the third parties that process personal data on our behalf today. The list is short because the product is small.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and file storage | European Union (eu-central-1) |
| DigitalOcean | Application hosting | European Union (Amsterdam) |
| Google Workspace | Email we send and receive, including support correspondence | European Union, with possible transfers under Google's standard contractual clauses |
Not currently used
Worth stating explicitly, because products in this category usually do use them and you would be reasonable to assume we do:
- No analytics or tracking provider. We do not measure you.
- No payment processor. Billing is not enabled and we hold no card details.
- No AI or model provider. Nothing you enter is sent to one.
- No data enrichment provider. The product does not buy or look up company or contact data yet.
Several of these will change as the product is built. When one does, it appears in the table above before it starts processing anything.
Notice of changes
We will give account holders at least 30 days' notice by email before adding a sub-processor that will process customer personal data, so there is time to object. To be notified, email privacy@scoperva.com.
Related
See the privacy policy for what we process and the data processing agreement for the terms on which we process it for you.