Subprocessors
Last updated: 2026-05-21
1. What is a subprocessor?
A subprocessor is an external service we use to help deliver Klyrix. Each one is contractually bound to keep your data confidential, to apply security controls equivalent to ours, and to honour international-transfer mechanisms such as EU Standard Contractual Clauses.
2. Notification policy
Before adding a new subprocessor we publish the change here and notify customer administrators by email at least 30 days in advance. Customers may object during this window; if the objection cannot be resolved we will, as a last resort, allow termination of the affected service line with pro-rata refund.
3. Current list
| Subprocessor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Hosting, CDN, Edge runtime | USA (primary) + EU edge | EU SCCs + Data Privacy Framework (DPF) |
| Supabase Inc. | Postgres database, Auth, Realtime, Storage | eu-central-1 (Frankfurt, EU) | EU SCCs (EU↔UAE); intra-EEA storage |
| Stripe Payments Europe Ltd. | Payment processing, invoicing, tax | EU (Ireland) + global processors | EU SCCs (intra-EEA for EU customers; SCC for UAE) |
| Resend Inc. | Transactional email | USA | EU SCCs + DPF |
| Cloudflare Inc. | DNS, WAF (optional), bot management | Global edge | EU SCCs + DPF |
| Sentry (Functional Software, Inc.) | Error monitoring, performance traces | USA + EU region available | EU SCCs + DPF |
| OpenAI, L.L.C. | Optional AI features (not active at general availability) | USA | EU SCCs + DPF — enabled only with customer opt-in |
4. Subscribe to notifications
Email privacy@klyrix.com with the subject line "Subprocessor notifications" and we will add you to the announce list. A public RSS feed is on the roadmap.
5. Historical changes
| Date | Change |
|---|---|
| 2026-05-21 | Initial subprocessor list published. |
Related: DPA · Privacy Notice · Trust Center.