Verdix Subprocessors

Last updated: 18 August 2026

Lynora AB uses a limited number of service providers to process Personal Data on behalf of Verdix customers in order to operate and provide the Verdix service.

Core subprocessors

Provider	Purpose	Data processed	Data residency / processing	Legal entity
Supabase	Database, private file storage and authentication	Customer account data, agreements, structured contract and billing data, and related application data	The primary Verdix project is hosted in Ireland, EU. International-transfer safeguards apply where required.	SUPABASE PTE. LTD., Singapore
Amazon Web Services / Amazon Bedrock	AI model processing and supporting cloud services	Masked contract content and other AI-processing inputs and outputs required to provide Verdix	Verdix routes Amazon Bedrock processing through its EU configuration.	Amazon Web Services EMEA SARL, Luxembourg
Vercel	Application hosting and server compute	Data processed through Verdix application and server functions	Verdix application compute is configured in Dublin, Ireland. International-transfer safeguards apply where required.	Vercel Inc., USA
Resend	Transactional email and service notifications	Email addresses and email or message content and metadata transmitted through the service	Processing may involve the United States and Resend subprocessors. International-transfer safeguards apply where required.	Plus Five Five, Inc., USA

Supabase

Purpose: Database, private file storage and authentication
Data processed: Customer account data, agreements, structured contract and billing data, and related application data
Data residency / processing: The primary Verdix project is hosted in Ireland, EU. International-transfer safeguards apply where required.
Legal entity: SUPABASE PTE. LTD., Singapore

Amazon Web Services / Amazon Bedrock

Purpose: AI model processing and supporting cloud services
Data processed: Masked contract content and other AI-processing inputs and outputs required to provide Verdix
Data residency / processing: Verdix routes Amazon Bedrock processing through its EU configuration.
Legal entity: Amazon Web Services EMEA SARL, Luxembourg

Vercel

Purpose: Application hosting and server compute
Data processed: Data processed through Verdix application and server functions
Data residency / processing: Verdix application compute is configured in Dublin, Ireland. International-transfer safeguards apply where required.
Legal entity: Vercel Inc., USA

Resend

Purpose: Transactional email and service notifications
Data processed: Email addresses and email or message content and metadata transmitted through the service
Data residency / processing: Processing may involve the United States and Resend subprocessors. International-transfer safeguards apply where required.
Legal entity: Plus Five Five, Inc., USA

Customer-selected integrations

At a customer’s instruction, Verdix may transmit approved billing information to downstream systems selected or enabled by that customer.

These customer-selected integrations are not automatically part of Verdix’s core infrastructure and may have separate contractual and data-protection roles.

Examples may include billing, invoicing and payment systems enabled by the customer.

Changes to subprocessors

Lynora AB maintains this list as core subprocessors are added, replaced or removed.

Customers covered by a Verdix DPA will receive at least 30 days’ notice before a material new subprocessor begins processing Customer Personal Data, except where an urgent change is required for security, availability or legal compliance.

Customers may raise legitimate data-protection concerns during that notice period.

Questions

For questions about Verdix subprocessors or data processing:

bilal@lynoraai.com