These are the companies that process data on our behalf when you use Proofavo. The list is part of the Data Processing Addendum: we give 30 days' notice before adding to it, and you may object.
| Sub-processor | What it does | What it receives | Where |
|---|---|---|---|
| Supabase | database, authentication, file storage | everything: accounts, proofs, artwork, comments, approvals; from the waitlist, a one-way fingerprint of the address and the time it joined — never the address | Ireland (eu-west-1) |
| Fly.io | runs the application | data in transit while a request is served | Frankfurt, Germany |
| Resend | sends the emails you ask us to send, and holds the waitlist | recipient address and the message text; the address of anyone who joined the waitlist | United States |
| Sentry | error reporting | technical details of a failure, scrubbed of tokens, links and keys | United States |
| Cloudflare (R2) | the backup copy of uploaded artwork | the artwork files themselves, nothing else | European Union (eu jurisdiction bucket) |
| PostHog | product analytics — which pages of our own site and application are used | which page was viewed, and three named actions; no cookie, no identifier stored in your browser, and nothing at all from a review link | Frankfurt, Germany (PostHog Cloud EU) |
| Anthropic | answers the help questions you type into the in-app assistant | your question, and facts about your own workspace: plan, proof names and statuses, version numbers and dates, whether an approval exists and which version it names, review-link state, and whether an email was delivered — never artwork, never a review link, never your customer's email address | United States |
Everything that matters stays in the EU. Your customers' artwork, their comments and the approval records live in Ireland and are served from Frankfurt, the backup copy of the artwork is held in an EU-jurisdiction bucket that cannot be reached from outside it, and the usage measurement is held in Frankfurt too. The two US-based sub-processors receive narrow things — an email address and the message we send for you, and a scrubbed error report with no request bodies and no session recording. Those transfers rely on the European Commission's standard contractual clauses.
Not a sub-processor
Dodo Payments handles subscriptions as our merchant of record. That makes them the seller of the transaction and an independent controller of the billing data you give them — not someone processing on our behalf. Their privacy policy governs it: https://dodopayments.com/legal/privacy-policy
We receive back an identifier and a subscription status. We never see your card.
Changes
This page is the notice. Subscribe to changes, or write to support@proofavo.com and we will tell you directly before anything is added.