IVYAI LEGAL
Subprocessors
Service providers authorised to process personal data to operate IvyAI.
Effective: 23 August 2026
Current subprocessors
| Provider | Purpose | Processing location and safeguards |
|---|---|---|
| Supabase, Inc. | Database, authentication, storage and backend services | Primary IvyAI project data is hosted in the Supabase London region (eu-west-2). Limited international processing may occur under the Supabase DPA and applicable transfer safeguards. |
| Netlify, Inc. | Website hosting, delivery, builds and edge services | International processing, including the United States, subject to the provider DPA, Data Privacy Framework where applicable and contractual transfer safeguards. |
| Plus Five Five, Inc. (Resend) | Transactional and service email delivery | IvyAI email is dispatched through Resend's Ireland (eu-west-1) region. Resend states that customer account data, including email metadata, logs and API records, is stored in the United States. International processing is subject to Resend's DPA and applicable contractual transfer safeguards. |
| Functional Software, Inc. dba Sentry | Error monitoring and security diagnostics | EU (Germany) project selected for event storage. Limited international support or processing may occur under the provider terms and transfer safeguards. |
Changes and objections
We will update this page before a new subprocessor begins materially different processing where practical. Business customers may object on reasonable data protection grounds by emailing support@ivyai.co.uk. We will assess the concern and work in good faith on a proportionate solution.
Supplier classification
Source-control and continuous-integration suppliers used only for IvyAI code and deployment administration are not intentionally provided with production customer personal data and are not listed as customer-data subprocessors on that basis. This classification is reviewed if their use changes.
Questions: support@ivyai.co.uk