Policy GeneratorSubprocessors
Draft last updated 24 July 2026
We use the third parties below to run the service. Each is engaged under a written data processing agreement and processes data only on our instructions. We will update this list before adding or changing a subprocessor.
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database, authentication and file storage | EU (Frankfurt, eu-central-1) | Data stays in the EEA |
| Vercel | Application hosting and delivery, and cookieless aggregated page analytics | EU region | Standard Contractual Clauses where applicable |
| Stripe | Payment processing | EU / US | EU-US Data Privacy Framework / Standard Contractual Clauses |
| Resend | Transactional email — sign-in links and receipts | EU region | Standard Contractual Clauses where applicable |
Once analytics or support tooling is introduced, each such provider must be listed here first.
Questions about how Philip George Advisory handles your data? privacy@pgadvisory.io.