Compliance
Subprocessors
Third-party services Evalgist BV relies on today, plus planned processors that will be used before product apps handle customer documents. Current evalgist.ai processing is limited to hosting, analytics, and waitlist email storage. Product AI providers will not keep customer documents where AI routing is involved. Material changes are communicated to active customers at least 30 days in advance.
Active
Vercel
Vercel Inc.
- Purpose
- Application hosting, edge delivery, build infrastructure, and planned AI Gateway.
- Location
- United States (HQ), with edge presence in Europe.
- Data residency
- Application code and cached responses on EU edge nodes when reached from EU. AI Gateway will be used for product AI routing before customer document processing goes live.
Resend
Plus Five Five, Inc., operating as Resend
- Purpose
- Transactional email delivery and waitlist contact storage.
- Location
- United States (San Francisco, CA); email dispatch from EU region (eu-west-1, Ireland).
- Data residency
- Sending: EU. Account data, metadata, logs, and Audiences contact storage: United States, under EU-U.S. Data Privacy Framework and Standard Contractual Clauses (DPA signed).
PostHog
PostHog Inc., EU cloud
- Purpose
- Product analytics for manual pageviews and waitlist funnel measurement. Captures email domain on signup, not raw email. No payment data, no CV or exam content.
- Location
- United States (HQ); EU cloud at eu.posthog.com.
- Data residency
- EU.
- Privacy
- posthog.com/privacy
Sentry
Functional Software Inc., operating as Sentry
- Purpose
- Error monitoring and performance tracing across platform apps. Captures stack traces and request metadata; PII routes are excluded and Session Replay is disabled platform-wide.
- Location
- United States (HQ); EU region used (ingest.de.sentry.io).
- Data residency
- EU.
- Privacy
- sentry.io/privacy
Planned
Supabase
Supabase Inc.
- Purpose
- Planned product database, file storage, and auth-adjacent RLS data layer.
- Location
- Singapore (HQ); EU project hosted in Ireland (eu-west-1).
- Data residency
- Customer data will be stored in EU product projects.
- Privacy
- supabase.com/privacy
Anthropic
Anthropic, PBC
- Purpose
- Planned AI model provider for product document analysis, accessed through Vercel AI Gateway.
- Location
- United States (HQ); EU processing route to be configured before product launch.
- Data residency
- Customer document prompts will be routed with zero data retention before product launch.
Stripe
Stripe Payments Europe Limited
- Purpose
- Payment processing for credit purchases.
- Location
- Ireland (EU).
- Data residency
- EU.
- Privacy
- stripe.com/privacy
Questions about how data flows through these services? Email legal@evalgist.ai.
Last updated 2026-05-14