Legal
Version 1.0 · Effective 20 July 2026
Subprocessors
The providers we rely on to run the service. We publish this list so that procurement teams can assess it without a call, and we tell customers before it changes.
Current subprocessors
| Provider | Purpose | Data handled | Processing region |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge delivery and serverless execution | Account identifiers, request logs | European Union |
| Supabase | Database, authentication and monitoring subscription records | Account data, subscription and notification records | European Union |
This list covers the providers that host and run the service and process data on our behalf. Providers that support the public website and your account — such as form processing, optional Google sign-in, transactional email and map tiles — act under our own controller responsibility and are listed in section 7 of our Privacy Policy.
Where processing takes place
Both providers process our data in the European Union. Each of them is incorporated outside the EEA, which means support and administrative access from outside the EU is possible even where the data itself stays in an EU region. Where any transfer of personal data outside the EEA occurs, we rely on the European Commission’s standard contractual clauses together with the provider’s supplementary measures.
We do not use a subprocessor outside the European Union for the storage of personal data you supply to us.
Upstream data sources
National Access Points and other public infrastructure data sources are not subprocessors. We consume data they publish; we do not send them anything about you, and they process nothing on our behalf. Their availability is outside our control, which is why the Service Levels exclude it.
Changes
Where a Data Processing Agreement is in place with you, we give at least 30 days’ notice before adding or replacing a subprocessor that handles personal data you have supplied, and you may object on reasonable data protection grounds. To be notified, write to legal@symbioen.com.
Under Deep Monitor and Market Intelligence we do not process personal data on your behalf, as set out in clause 12 of the Subscription Terms.