FRBook a walkthrough

Sub-processors

Who processes data for us

Every provider that processes customer data on our behalf, with its role, its region and its terms. A new provider is announced 30 days before it starts.

Last changed 18 September 2026Data processing addendum, section 07

The register

ProviderWhat it does for usRegionTerms
SupabaseManaged Postgres, authentication, file storage.Canada (Montréal)Data-processing agreement
VercelApplication hosting, edge functions, build pipeline.United States (US East), with a global edgeData-processing agreement
CloudflareAuthoritative DNS, DDoS mitigation, web application firewall.GlobalData-processing agreement
OpenRouterAI model access for classification, risk and analyst agents, and the assistant. Active since 1 September 2026.Global routing, no region pinnedData-processing agreement
AnthropicNot in useAI model access. Configured, but no AI request has reached it since 1 September 2026.United StatesData-processing agreement
InngestBackground jobs for notifications, retention and webhook delivery.United StatesThis provider publishes no public data-processing agreement. Linked instead:Inngest security overview
ResendTransactional email: notifications, sign-in links, digests.United StatesData-processing agreement
StripeSubscription billing. eAviora never stores card data.United States and IrelandData-processing agreement
SentryError tracking: stack traces and metadata.United StatesData-processing agreement

  • Supabase

    What it does for us
    Managed Postgres, authentication, file storage.
    Region
    Canada (Montréal)
    Terms
    Data-processing agreement

  • Vercel

    What it does for us
    Application hosting, edge functions, build pipeline.
    Region
    United States (US East), with a global edge
    Terms
    Data-processing agreement

  • Cloudflare

    What it does for us
    Authoritative DNS, DDoS mitigation, web application firewall.
    Region
    Global
    Terms
    Data-processing agreement

  • OpenRouter

    What it does for us
    AI model access for classification, risk and analyst agents, and the assistant. Active since 1 September 2026.
    Region
    Global routing, no region pinned
    Terms
    Data-processing agreement

  • Anthropic

    Not in use
    What it does for us
    AI model access. Configured, but no AI request has reached it since 1 September 2026.
    Region
    United States
    Terms
    Data-processing agreement

  • Inngest

    What it does for us
    Background jobs for notifications, retention and webhook delivery.
    Region
    United States
    Terms
    This provider publishes no public data-processing agreement. Linked instead:Inngest security overview

  • Resend

    What it does for us
    Transactional email: notifications, sign-in links, digests.
    Region
    United States
    Terms
    Data-processing agreement

  • Stripe

    What it does for us
    Subscription billing. eAviora never stores card data.
    Region
    United States and Ireland
    Terms
    Data-processing agreement

  • Sentry

    What it does for us
    Error tracking: stack traces and metadata.
    Region
    United States
    Terms
    Data-processing agreement

Changes

Every change, with its date

  1. Inngest: the link now goes to its security page, because Inngest publishes no data-processing agreement.

  2. OpenRouter added as the AI processor, active since 1 September 2026. Anthropic marked as configured but not in use.

Notice of changes

30 days before a new provider

Under the data processing addendum, customers are told 30 days before a new sub-processor starts, through the contacts in their agreement. This page is updated the same day.

Ask about the register