Current subprocessors

Subprocessor	What for	Data	Where	Transfer basis
Google Cloud (Google Cloud EMEA Ltd)	Running the service (Cloud Run); secrets; logs	Everything the service handles, in transit and in logs (no chat content is logged)	London, UK	UK
Google Cloud Vertex AI (Gemini models), through Simplyxity's SimplyBrain service	Drafting each answer	The question, the last few turns of the chat, and the business's knowledge, per request; nothing is stored by SimplyBrain	European Union (Vertex AI's EU region)	UK adequacy for the EU
Supabase (on Amazon Web Services)	The database; owners' sign-in	Chats, contact details, knowledge, settings; owners' email addresses	London, UK	UK
Cloudflare	Edge network: the API's and the inbox's addresses, rate limiting, the bot check (Turnstile)	Requests in transit, including chat messages; IP addresses for rate limiting and the bot check	Global network	The provider's data processing terms, with the UK International Data Transfer Addendum
Resend	Email: alerts to owners, replies to customers, sign-in links	Recipient address, the email's content (a question, contact details, a reply)	European Union (Ireland)	UK adequacy for the EU
Google Firebase Hosting	This website (simplyasks.dev)	Visitors' requests to the website only; no chat data	Global network	The provider's data processing terms, with the UK International Data Transfer Addendum
Sentry	Error reports from SimplyBrain	Server errors only, with request content removed before sending: no chat text	European Union (Germany)	UK adequacy for the EU

About SimplyBrain

SimplyBrain is a Simplyxity service, not a separate company: it is listed only to say where answers are drafted. It keeps no chat content; it records usage counts (tokens, cost) per request, for billing and limits.

Changes to this list

Changes are announced by email at least 30 days ahead, as the data processing agreement sets out under "Subprocessors".