Subprocessors
Version 0.3 - 1 May 2026
This draft register explains the selected international subprocessors that may support Euvyra's beta while the product remains EU-first and GDPR-first.
Draft status
This register is a product and compliance draft. It is not a final vendor approval, legal assessment, or production subprocessor notice.
A lawyer or privacy specialist should review vendor contracts, DPA terms, SCCs, transfer risk assessment, and subprocessor lists before launch.
Beta position
Euvyra uses EU-region hosting by default where available, with selected international subprocessors for speed, cost, and product maturity during beta.
Euvyra does not present the beta vendor stack as a sovereign cloud implementation while providers such as Supabase, Vercel, Cloudflare, Sentry-compatible services, Inngest, or email providers may be used.
Current and potential subprocessors
- Supabase beta default: Auth and Postgres for beta accounts and social data; EU project region required; DPA, SCCs, and transfer risk assessment required.
- Vercel: app hosting or deployment if used; region configuration, DPA, and transfer safeguards required.
- Cloudflare: DNS, CDN, WAF, or DDoS controls if used; data localization and risk checks required.
- Sentry-compatible monitoring: error reporting if enabled; avoid sending sensitive content and confirm EU hosting or transfer safeguards.
- Inngest: background job orchestration if enabled; confirm event data minimization, DPA, and transfer safeguards.
- Email provider: transactional email if enabled; confirm EU-region processing, DPA, and data minimization.
- Scaleway and Keycloak: future EU-owned migration path; not the active beta default unless separately configured.
Required vendor checks
- Data Processing Agreement signed or accepted.
- Subprocessor list reviewed and documented.
- EU-region configuration verified where the vendor supports it.
- Standard Contractual Clauses or other transfer mechanism checked where needed.
- Transfer risk assessment recorded before production launch.
- Privacy Policy updated if vendor use changes materially.
Contact
Questions about subprocessors should be routed to Euvyra@tuta.com until dedicated role mailboxes and final company contact details are approved.