Last updated: July 6, 2026 · Version 2.0
Sub-Processors
SOCSimulator LLC uses a small number of trusted third-party service providers ("sub-processors") to help deliver our service. This page lists the sub-processors that may process personal data, along with the purpose of each engagement, the categories of data involved, and the region in which processing takes place.
Sub-Processor Register
Each sub-processor below is engaged under a written contract that imposes data protection obligations no less protective than those we commit to in our Privacy Policy and Data Processing Addendum. We remain responsible for the processing our sub-processors carry out on our behalf.
| Sub-processor | Purpose | Data categories | Location / Region | Docs |
|---|---|---|---|---|
| Supabase | Authentication and Postgres database (primary data store) | Account and profile data, training/assessment activity, authentication data | EU region | Privacy |
| Stripe | Payment processing and subscription billing | Billing details, transaction history, email address | United States / global | Privacy |
| Resend | Transactional and marketing email delivery | Email address, name, message content | United States | Privacy |
| Vercel | Application hosting and content delivery network (CDN) | IP address, request metadata, log data | United States / global | Privacy |
| Cloudflare | Bot and fraud prevention (Turnstile) and edge network services | IP address, request metadata, challenge tokens | Global | Privacy |
| Upstash | IP-based rate limiting (abuse prevention) | IP address, request counters | United States / global | Privacy |
| Umami | Product analytics (cookieless pageview/event tracking, sampled session replay and heatmaps) | A pseudonymous account identifier, page and event data, interaction data with input fields masked | Self-hosted | Docs |
| Discord | Optional community integration — role sync and notifications for users who link their Discord account. Active only when you link Discord. | Discord user ID, Discord OAuth tokens, subscription tier/rank | United States / global | Privacy |
Changes to This List
We notify affected business customers of changes to our sub-processors at least 30 days before onboarding a new sub-processor, giving them the opportunity to object on reasonable data protection grounds before the new sub-processor begins processing. Details of the objection process are set out in our Data Processing Addendum.
More Information
For more detail on how we handle personal data, see our Privacy Policy and Data Processing Addendum. Questions about this register can be directed to support@socsimulator.com.