Sub-processors
CONSLINQ
Last updated: 18 October 2026 · Version 1.0
Overview
CONSLINQ engages a small number of infrastructure sub-processors to deliver the Service. Each is bound by a written contract containing data protection terms consistent with our Data Processing Agreement.
This page identifies each sub-processor currently engaged, the purpose of the processing, the location of processing, and the transfer mechanism relied upon where the sub-processor is established outside the European Economic Area.
We notify customers at least 30 days before engaging a new sub-processor or making a material change to an existing sub-processor arrangement. Customers may object under the terms of the DPA.
Current sub-processors
| Sub-processor | Purpose | Data location | Entity location | Transfer mechanism |
|---|---|---|---|---|
| Supabase | Database hosting and file storage | European Union — Frankfurt (eu-central-1) | Supabase Inc., United States | EU Standard Contractual Clauses executed by Supabase; supplemented by technical measures (data at rest and compute region-pinned to the EU) |
| Vercel | Application hosting and delivery | European Union — Frankfurt (fra1) | Vercel Inc., United States | EU Standard Contractual Clauses executed by Vercel; supplemented by technical measures (compute region-pinned to the EU) |
| Resend | Transactional email delivery (invitations, notifications, service messages) | Email dispatch: European Union — Ireland (eu-west-1) Account data, delivery logs and metadata: United States | Resend, Inc., United States | EU Standard Contractual Clauses executed by Resend |
Note on Resend
Resend applies region settings per sending domain. The conslinq.com sending domain is configured to the Ireland (eu-west-1) region, so platform emails are dispatched from within the European Union. However, Resend stores account data, delivery logs and associated metadata in the United States regardless of the sending region. Delivery logs may contain recipient email addresses, delivery status and timestamps.
Scope of email processing. Emails sent through Resend contain service messages, invitations and notifications. Notifications may include limited case details such as a case reference, a first name, a document type, a payment amount or a change of status. They never include case documents, passport numbers or other identity document details.
About international transfers
Storage of customer and client case data, and the application compute that processes it, occur within the European Union.
Some of our sub-processors are corporate entities established in the United States. Where a transfer of personal data outside the European Economic Area occurs — whether as a routine part of a sub-processor's operation, as with Resend's storage of delivery logs, or incidentally through a sub-processor's global operations teams — an appropriate transfer mechanism under Chapter V GDPR is in place. In each case above, the mechanism relied upon is identified in the table.
Changes to this list
Before adding a new sub-processor or materially changing an existing sub-processor relationship, we notify customers by email to the account owner and by updating this page. The notice period is 30 days unless an urgent security or availability requirement justifies a shorter period.
Customers who object to a new or changed sub-processor on reasonable data-protection grounds may raise the objection under the terms of the Data Processing Agreement. Where the objection cannot be resolved, the customer may terminate the affected part of the Service.
Deprecated and historical sub-processors
None. This section will be maintained as sub-processors are added, changed or removed over time.
Contact
Questions about our sub-processor arrangements may be sent to legal@conslinq.com.