Last updated: September 2026
← Back

Sub-processors

The third-party services that process personal data on our behalf to run TickGDPR — who they are, what they do, and where.

Sub-processor Purpose Location & safeguards
Anthropic AI processing of the text of documents you upload or generate, to produce compliance reviews and drafts. Your documents are not used to train AI models. USA — Standard Contractual Clauses in place
Supabase Database, file storage and authentication — your account data, documents and review outputs. EU — Frankfurt
Railway Application hosting and infrastructure the platform runs on, including operational logs. EU West
Stripe Payment processing — subscriptions and pay-per-use credit top-ups. We never see or store your card number. EU / USA — Standard Contractual Clauses in place
Titan (email) Transactional email — account verification, notifications, retention warnings. Global (AWS infrastructure) — under the provider's Data Processing Agreement
Every sub-processor operates under a Data Processing Agreement (Art. 28 GDPR). Transfers outside the EEA rely on Standard Contractual Clauses. We do not sell personal data. When we add or replace a sub-processor, we update this page; material changes affecting customers under a DPA with us are notified in advance to the account email.
Questions about our sub-processors or data handling? Contact info@tickgdpr.eu · See also our Privacy Policy.

We use cookies

We use essential cookies to keep you logged in, and optional analytics cookies to improve the platform. Read our Privacy Policy and Cookie Policy for details.

Cookie preferences

Choose which cookies you allow. Essential cookies cannot be disabled as the platform requires them to function.

Essential

Authentication, security, session management. Always active.

Analytics

Help us understand how the platform is used so we can improve it. No personal data sold.

Marketing

Used for relevant product updates and offers. We don't share your data with third-party advertisers.