Sub-processors
Last updated: 25 September 2026
These service providers process customer data for Emfara in providing DGM One. Each is bound by a written contract that gives, in substance, the same data protection obligations as our data processing terms.
We give customers at least 30 days' notice by email before a new or replacement sub-processor processes their data. Customers may object as their agreement with us provides. To ask about notices, write to privacy@emfara.com.
| Sub-processor | Purpose | Location of processing | Transfer safeguard | Its own sub-processors |
|---|---|---|---|---|
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | Application hosting and compute | United States (functions in the Washington, D.C. region). Requests are received at the Vercel edge location nearest the user and passed to the United States | Vercel data processing addendum with EU standard contractual clauses | security.vercel.com |
| Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 | Primary database and daily backups | United States (us-east-1) | Supabase data processing addendum with EU standard contractual clauses | supabase.com |
| Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA | Storage of documents and package photographs | United States | Cloudflare data processing addendum with EU standard contractual clauses; also certified under the EU-US Data Privacy Framework | cloudflare.com |
| Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA | AI processing for DGM One's AI features | United States (storage and inference) | Anthropic data processing addendum with EU standard contractual clauses | trust.anthropic.com |
| PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA | Product analytics inside DGM One, only for users who have consented | United States (PostHog Cloud US) | Provider's data processing addendum with EU standard contractual clauses | posthog.com |
| Stripe, LLC, 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA | Payments and subscription billing: the billing contact and the subscription record | United States, with Stripe group affiliates processing elsewhere as listed on its service providers page | Provider's data processing addendum with EU standard contractual clauses | stripe.com |
| Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Error monitoring | United States | Sentry data processing addendum with EU standard contractual clauses; also certified under the EU-US Data Privacy Framework | sentry.io |
| Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA | Transactional email | United States | Resend data processing addendum with EU standard contractual clauses | resend.com |
| Google LLC (Google Workspace), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Emfara's own email, including support correspondence | United States | Provider's data processing addendum with EU standard contractual clauses | workspace.google.com |