| Subprocessor Entity | Operational Role | Data Location | Transfer Safeguard |
|---|---|---|---|
| Vercel Inc. | Edge Network, Serverless Compute & Web Hosting | USA / Global Edge | Standard Contractual Clauses (SCC) |
| Amazon Web Services (AWS EMEA SARL) | Cloud Object Storage (S3) & Compute Backends | UK (London) / EU | Adequacy Decision / SCC |
| Cloudflare Inc. | DNS Anycast, Web Application Firewall (WAF) & DDoS Protection | Global Edge | Standard Contractual Clauses (SCC) |
| Resend Inc. | Transactional Email Dispatch & API Inquiries | USA | Standard Contractual Clauses (SCC) |
| Stripe Payments Europe Ltd | PCI-DSS Level 1 Payment Processing | Ireland (EU) | Adequacy Decision |
Dev Remind reviews the security and data protection posture of all third-party subprocessors annually in accordance with UK GDPR Article 28 obligations.