Sub-processors
Updated 26 May 2026
We use the services below for hosting, communication and other functions. The data a service processes depends on the tool and function being used.
This overview covers syntrociety.org, syfers.eu, People, Lens, Compass and Chart. It describes the listed services and does not replace an individual tool’s privacy notice.
If you want to object to a new sub-processor we add, write to privacy@syntrociety.org within 30 days of the change.
Hosting and infrastructure
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| Vercel Inc. | Application hosting + edge runtime | US (global edge network) | All HTTP traffic, server logs | All federation surfaces |
| Supabase Inc. | Managed Postgres + Auth + Storage | EU (Frankfurt) | Account identity, application data | people, lens, compass, chart |
| Upstash Inc. | Rate-limit Redis | EU (Frankfurt) | Rate-limit keys (hashed) | people, lens, compass |
| Fly.io Inc. | Pandoc microservice host | EU | Document content in transit (no retention) | lens |
Communication
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| Plus.io Inc. (Resend) | Transactional + newsletter email | US + EU sending | Email address, message content, delivery events | syntrociety, people, lens, compass, chart |
Analytics
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| Plausible Insights OÜ | Cookieless analytics | EU (Germany) | Aggregated page-views, no persistent identifier | syfers.eu, syntrociety.org |
| Vercel Inc. | Web Analytics + Speed Insights (Core Web Vitals) | US (global edge network) | Aggregated page-views, Core Web Vitals, no persistent identifier | syntrociety.org |
Document analysis and search
The model services listed below are used by Lens for document processing. Their role is described explicitly here so you can see where document content is processed.
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| Anthropic PBC | LLM (document classification, translation, chat) | US | Document content, prompts, responses | lens |
| Voyage AI Inc. | Embeddings for search and retrieval | US | Document chunks | lens |
Payments
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| Stripe Payments Europe Ltd. | Historic card-processing records and Lab billing | IE + US (fraud prevention) | Card data (PCI scope at Stripe), customer email, amount | syntrociety, compass |
Source control and deployment
| Processor | Role | Location | Data | Used by |
|---|---|---|---|---|
| GitHub Inc. | Source hosting; document commit target for lens and chart | US | Application code; for lens: document content + frontmatter; for chart: generated Markdown | All federation surfaces |
Transfers outside the EEA
Some service providers process data outside the European Economic Area. This requires an appropriate basis for the transfer, such as an adequacy decision or the European Commission’s standard contractual clauses. Conditions differ by provider. Ask us about the arrangements that apply to your data.
Sub-sub-processors
Each processor above maintains its own list of sub-sub-processors (AWS for Supabase, Google Cloud for Plausible, etc.). We track those internally and notify of material changes that affect data residency.