Sub-processors
HEOSSI uses service providers to operate the hosted service. This page lists current categories and providers. A signed DPA or enterprise schedule prevails if it lists different terms.
Current providers
- Vercel: application hosting, serverless functions, private blob storage and edge delivery.
- Supabase / managed PostgreSQL: account, organization, job, usage, audit and billing metadata.
- Stripe: subscriptions, one-time payments, tax calculation, invoices and the customer billing portal.
- Transactional email provider: verification, password reset, invitation and job-completion emails.
- Security and monitoring providers configured by HEOSSI for availability and abuse prevention.
Data location
Portal functions are configured for the Vercel sin1 (Singapore) region. Blob storage and database locations depend on the configured provider projects. Payment data is processed by Stripe under its own terms and safeguards.
Changes
We will update this page when a sub-processor that processes customer personal data changes. Customers with a DPA receive notice and a reasonable opportunity to object where required. Emergency replacements may be made sooner with notice after the change.
Sub-processor questions: saar-legal@heossi.com.
Contact
Legal: saar-legal@heossi.com · Privacy: saar-privacy@heossi.com · Security: saar-security@heossi.com