| Subprocessor | Purpose | Location | Certifications |
|---|---|---|---|
| Vercel Inc. | Application hosting & global edge network | EU region (Frankfurt, fra1) | SOC 2 Type II |
| Neon Inc. | Managed PostgreSQL database (primary data store) | EU — Frankfurt (eu-central-1) | SOC 2 Type II · ISO 27001 |
| Transactional email provider | Sending account, notification & system emails | As configured per institution | Provider-dependent |
| UptimeRobot | Uptime monitoring (health endpoint only — no personal data) | USA | N/A — no PII |
Notification of changes
We give institutional customers advance notice before adding or replacing a subprocessor, so you can review the change and, where you have reasonable data-protection grounds, object. Where a hosting region is required (for example, EU data residency), your instance is provisioned in that region.
Data residency
The primary data store (Neon PostgreSQL) can be provisioned in the region your institution requires, including the EU. Application hosting is served from the nearest edge for performance, with dynamic processing pinned to your chosen region.
Questions about this list or our subprocessors? Email security@aulamagna.io or see our Data Processing Agreement.