Subprocessors & Data Processing
Demurly uses the following third-party service providers (subprocessors) to help deliver our services. Each subprocessor is contractually obligated to protect your data in accordance with our privacy standards.
Current Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Database hosting, authentication, file storage | United States |
| Vercel | Application hosting and deployment | United States |
| Cloudflare | Security services, DDoS protection, CAPTCHA | United States |
| Stripe | Payment processing | United States |
| Resend | Transactional email delivery | United States |
| Sentry | Error monitoring and performance tracking | United States |
| Mapbox | Mapping and location services | United States |
| OpenStreetMap | Map tile data | Global (open source) |
| Upstash | Rate limiting infrastructure | United States |
Data Processing Agreement (DPA)
Enterprise customers may request a Data Processing Agreement that governs how Demurly processes personal data on your behalf. Our DPA includes:
- Standard Contractual Clauses (SCCs) for international transfers
- Technical and organizational security measures
- Subprocessor notification and approval procedures
- Data breach notification commitments
- Audit rights and cooperation
To request a DPA, contact us at privacy@demurly.com
Subprocessor Updates
We may update our list of subprocessors from time to time. Enterprise customers with a DPA will receive advance notice of any new subprocessors as specified in their agreement.
This page was last updated on January 2025.
Questions
For questions about our data processing practices or to request additional information, please contact privacy@demurly.com
See also: Privacy Policy | Cookie Policy | Do Not Sell My Info