EveryVisitor Legal
Subprocessors Registry
Current list of authorized third-party service providers · Last updated: October 18, 2026
To deliver our continuous accessibility monitoring service, EveryVisitor engages third-party service providers ("subprocessors") to perform technical, infrastructure, and payment processing functions. Prior to engaging any subprocessor, EveryVisitor conducts due diligence to evaluate their security posture, confidentiality obligations, and data protection compliance.
| Subprocessor | Service & Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Cloudflare, Inc. Cloudflare, Inc. (USA / EU) | Cloudflare Turnstile, CDN, R2 Object Storage Privacy-preserving bot protection (no captcha cookies) and secure encrypted artifact storage for reports and scan data. | Global / European Union edge | Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework |
| Paddle.com Market Ltd. Paddle.com Market Ltd. (United Kingdom) | Merchant of Record, Billing & Invoicing Customer billing, credit card processing, VAT/sales tax compliance, and automated invoicing. | United Kingdom | UK Adequacy Regulations / EU Adequacy Decision |
| Hetzner Online GmbH Hetzner Online GmbH (Germany) | Dedicated Cloud Compute & PostgreSQL 16 Hosting Primary database storage, scan runner workers, and core API application execution. | Falkenstein / Nuremberg, Germany (EU) | Intra-EU data processing (GDPR direct) |
| Supabase, Inc. Supabase, Inc. (USA) | Managed PostgreSQL database Hosted PostgreSQL that stores account, organisation, scan and issue data. Encrypted at rest; row-level security blocks Supabase's public data API. | European Union region (eu-central / eu-west) | Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework |
| Resend, Inc. Resend, Inc. (USA) | Transactional Email Infrastructure Sending regression alert notifications, team invitation links, magic login emails, and PDF report deliveries. | United States | Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework |
| Functional Software, Inc. (Sentry) Functional Software, Inc. (USA) | Error Monitoring & Diagnostics Crash reporting and runtime error diagnostics. Configured with PII data scrubbers. | United States | Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework |
| Google LLC (Optional) Google LLC (USA) | Gemini API (AI Fix Suggestions) Optional on-demand AI remediation suggestions. Code snippets are scrubbed of phone numbers and email addresses prior to transmission. | United States | Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework |
Notification of New Subprocessors
Customers with an active Data Processing Agreement can subscribe to notifications of new subprocessor additions by emailing privacy@plainsight.io. We provide at least 30 days notice prior to authorizing any new subprocessor.