Sub-processors

Last updated: June 25, 2026

Important: this draft reflects how the product works but has not yet been reviewed by a licensed attorney. Have your own lawyer review it before relying on it in production.

We use the third-party sub-processors below to operate the Service. Each processes personal data only on our instructions and under confidentiality and data-protection obligations. We will give notice before adding or replacing a sub-processor that materially affects the processing of your data.

Polar Software Inc. — Payments

Acts as our merchant of record for checkout, subscriptions, invoicing, and refunds. Processes your email, billing details, and order metadata. Card data is handled by Polar and its payment partners; we never receive your full card number. Region: United States / EU.

Resend — Transactional email

Delivers transactional email such as magic sign-in links, receipts, monitoring alerts, and security notices. Processes recipient email addresses and message content. Region: United States.

Managed PostgreSQL hosting — Application database

Stores account, scan, report, and billing-metadata records. Region: [PLACEHOLDER: confirm hosting region, e.g. EU]. Processes all personal data described in the Privacy Policy.

Managed Redis hosting — Cache and queues

Provides caching, rate limiting, and background-job coordination. May transiently hold identifiers and scan progress. Region: [PLACEHOLDER: confirm hosting region].

S3-compatible object storage — Screenshots and reports

Stores page screenshots and generated VPAT and accessibility-statement PDFs. Region: [PLACEHOLDER: confirm storage region]. Access is restricted via time-bound signed URLs.

Google Analytics — Product analytics (optional)

If enabled for this deployment, measures aggregate, anonymous product usage. No personal data is sent. Region: United States. If analytics is disabled, this sub-processor is not used.

This page is informational only and does not constitute legal advice, nor a guarantee of WCAG or EU Accessibility Act conformance. Automated testing finds a subset of accessibility issues; please consult a qualified accessibility or legal professional before relying on it.

Questions? Email legal@eaacompliant.com.