Legal
Sub-processors
Last updated September 9, 2026. We give customers at least 30 days' notice before adding or replacing a sub-processor.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Application database, authentication and file storage | Account records, operational records, uploaded files | United States / EU (region-dependent) |
| Cloudflare | Content delivery, edge compute and DDoS protection | Request metadata, IP addresses | Global edge network |
| Stripe | Subscription billing and payment processing | Billing contact, payment method tokens, invoices | United States / Ireland |
| Google (Sign-in) | Optional single sign-on for user accounts | Email address, name, profile identifier | United States |
| Resend | Transactional email delivery | Email address, message content | United States |
To be notified of changes to this list, email privacy@guardresourceone.com and ask to join the sub-processor notification list. These providers are engaged under the terms of our Data Processing Addendum.