Sub-processors

Last updated: April 2026

The following third parties process personal data on our behalf to deliver Bersyn. We review each sub-processor for security and GDPR alignment before engaging them. Material changes to this list are announced at least 30 days in advance via email to subscribed customers.

VendorPurposeData processedRegionTransfer mechanism
SupabaseDatabase, authentication, storageAccount, workspace, scan resultsEU / USSCCs (EU SCC 2021/914)
VercelApplication hosting & edge deliveryHTTP request metadataUSSCCs / EU–US DPF
OpenAIAI scanning (ChatGPT)Product name, scan queriesUSSCCs / EU–US DPF
AnthropicAI scanning (Claude)Product name, scan queriesUSSCCs / EU–US DPF
GoogleAI scanning (Gemini)Product name, scan queriesUS / EUSCCs / EU–US DPF
PerplexityAI scanningProduct name, scan queriesUSSCCs
ResendTransactional email deliveryEmail address, message contentUS / EUSCCs
LemonSqueezySubscription billing (Merchant of Record)Name, email, billing identifiersUS / EUSCCs
SentryError monitoringError traces, IP, user IDUS / EUSCCs / EU–US DPF

Questions or objections about a specific sub-processor? Email privacy@bersyn.com.