Sub-processors
Third parties that process personal data on our behalf to run the service.
Last updated: September 2026
Simple Certificate Tracker uses the following sub-processors. We choose providers with appropriate security practices and data processing terms. This list may be updated — check the date above.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting and edge delivery | EU/US (see Vercel DPA) |
| Neon | PostgreSQL database (employee and certificate records) | Configurable region (EU recommended for UK customers) |
| Resend | Transactional email (verification, password reset, reminders) | US (see Resend DPA) |
| Stripe | Payment processing (Premium subscriptions) | US/EU (Stripe handles card data; we do not store card numbers) |
| PostHog | Product analytics (no certificate content in events) | US or EU (configurable via NEXT_PUBLIC_POSTHOG_HOST) |
Optional storage providers
If STORAGE_PROVIDER=s3 is configured, certificate documents may also be stored with your chosen S3-compatible provider (e.g. Cloudflare R2). That provider's DPA applies to uploaded files in that configuration.
Changes
We will update this page when we add or replace a sub-processor that handles personal data. Material changes may also be communicated to active customers by email.