Sub-processors

To run EvalLens we rely on a small number of trusted providers (“sub‑processors”) that process personal data on our behalf. Each processes information under contract and only on our instructions, consistent with our Privacy Policy and, where applicable, our Data Processing Addendum. This page lists the sub‑processors we currently use.

• Supabase— database, authentication, and file storage for accounts, submissions, and evaluation data. Processing region: European Union / United States.
• Vercel— application hosting and delivery, and the AI Gateway that routes evaluation requests to model providers. Processing region: United States / global edge network.
• AI model providers— large‑language‑model inference used to generate advisory evaluation reports, accessed through the Vercel AI Gateway. Providers are instructed to process content only to deliver the Service and not to train their foundation models on it. Processing region: primarily United States.
• Google— optional Google OAuth sign‑in; where you choose it, Google provides basic profile information (such as name and email) to authenticate you. Processing region: United States / global.

Some sub‑processors operate outside Georgia and the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as the Standard Contractual Clauses, as described in our Privacy Policy.

We may add or replace sub‑processors as the Service evolves. When we make a material change, we will update this page and revise the “Last updated” date above. If you have a data‑processing agreement with us that provides for advance notice of new sub‑processors, we will follow that process.

Questions about our sub‑processors? Contact privacy@evallens.io.