Subprocessors.
Effective: 23 May 2026
Confir engages a small set of carefully selected third-party subprocessors to help us provide and operate the Service. This page lists each subprocessor, the purpose of the engagement, the categories of personal data involved and the location of processing.
For the contractual obligations governing our use of subprocessors, see our Data Processing Agreement.
Current subprocessors
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure hosting (compute, storage, network) | All Customer Data — encrypted at rest and in transit | Frankfurt, Germany (eu-central-1) |
| Supabase Inc. | Managed Postgres database, authentication, file storage, Edge Functions | Customer Data, account data, audit logs, evidence files | Frankfurt, Germany (EU region) |
| Stripe Payments Europe Ltd | Subscription billing and payment processing | Billing contact, company name, VAT ID, payment method tokens (we do not store card numbers) | Dublin, Ireland (EU) |
| [Transactional email provider, e.g. Postmark / Resend] | Transactional and notification emails (sign-in, invoices, product alerts) | Recipient email, subject and message body | [EU region] |
| [Error / log monitoring provider, e.g. Sentry / Highlight] | Application error reporting and performance monitoring | IP address, user agent, error context (no Customer Data payload) | [EU region] |
| [Analytics provider, e.g. Plausible / Fathom] | Privacy-friendly aggregated marketing-site analytics | No personal identifiers; aggregated counts only | EU |
| [Support desk provider, e.g. Plain / Front] | Customer support ticketing | Contact details, support correspondence | [EU region] |
Notification of changes
We notify customers at least 30 days in advance of any addition or replacement of a subprocessor. Customers who want to be notified can opt in via the [Notification settings page] or by emailing privacy@confir.eu. Customers may object on reasonable grounds; if we cannot accommodate the objection, the affected services may be terminated without penalty.
Affiliates
Confir has no affiliates as of the effective date of this page. If we engage affiliates to provide the Service in the future, they will be bound by the same data-protection terms as third-party subprocessors and will be listed in the table above.
Contact
Questions about our subprocessors? Write to privacy@confir.eu.