Legal
Subprocessors
Who helps us run Dueclear, and what they can see.
These companies help us run Dueclear and may process personal data on our behalf. Each is bound by a data processing agreement with terms at least as protective as ours. We tell workspace owners by email 30 days before adding or replacing one, so they can object.
| Company | What for | Where | Data | Privacy |
|---|---|---|---|---|
| Supabase Pte. Ltd. | Database, sign-in and file storage | EU (Frankfurt, Germany), on Amazon Web Services | Account details, the register, certificates and history | supabase.com/privacy |
| Cloudflare, Inc. | Website hosting, network security, cookie-free visitor statistics | Global network; EU data localisation where available | IP address and technical request data | cloudflare.com/privacypolicy |
| Stripe Payments Europe, Ltd. | Payments, invoices, VAT | Ireland (EU); Stripe group in the US under the EU-US Data Privacy Framework | Billing contact, company and payment details | stripe.com/privacy |
| Resend, Inc. | Sending reminder, invitation and sign-in emails | United States, under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework | Recipient email address, name, message content, delivery logs | resend.com/legal/privacy-policy |
What is not on this list
Reading dates from certificates happens in your browser with open-source software (pdf.js). No AI service receives your documents.
Last updated 14 November 2026.