Legal disclosure
Sub-processors Disclosure
Third-party service providers that process data on behalf of Erfüllen, including EU primary vault providers and optional external processors.
Last updated: 12 August 2026
Primary EU vault processors
These providers host the primary compliance data plane in Frankfurt, EU.
| Provider | Purpose | Region note | Vendor DPA / legal |
|---|---|---|---|
| Supabase | Database | EU Frankfurt (eu-central-1) — primary compliance vault | View vendor terms |
| Vercel | Hosting | EU Frankfurt (fra1 / eu-central-1) | View vendor terms |
| Upstash | Rate Governance | EU-Central-1 (Frankfurt) | View vendor terms |
Additional processors (may operate outside primary EU vault)
These services are used for specific features. They may process limited data outside the primary EU vault when those features are enabled or used. AI-generated output must be reviewed by a responsible human before regulatory submission.
| Provider | Purpose | Region note | Vendor DPA / legal |
|---|---|---|---|
| Anthropic (Claude) | Erfüllen Engine | May process outside the primary EU vault when AI features are used | View vendor terms |
| Google (Gemini) | Erfüllen Engine | May process outside the primary EU vault when AI features are used | View vendor terms |
| Resend | Email delivery infrastructure — verify current region in vendor dashboard | View vendor terms | |
| Razorpay | Payments | Payment metadata — region varies by Razorpay configuration | View vendor terms |
Customer integrations
If you connect MLflow, Weights & Biases, SageMaker, or another MLOps source, event payloads are received by Erfüllen and stored in your workspace within the primary EU vault unless otherwise disclosed in your integration agreement with that provider.
Related documents
For processor agreements and verification guidance, see the DPA & Processor Agreements page and the Privacy Policy.