Trust centre

Subprocessors

A live register of vendors that may process data to provide the service.

Current register

This register is being completed before broader intake with cloud hosting/storage, authentication, payment, email, monitoring, support, and analytics vendors.

  • Supabase: managed authentication and storage where configured; region and DPA status to confirm.
  • Stripe: payment checkout and billing metadata; no raw genomic data is sent.
  • Google Workspace/Gmail: operational email where configured; no genome files or reports as attachments.
  • Hosting/CDN provider: public website and portal hosting; provider and region to confirm.

Minimum fields

Each subprocessor entry lists purpose, data categories, region, transfer safeguard, DPA status, retention or deletion terms, incident notification terms, and exit plan once confirmed.

Trust centre

These pages describe the current product posture and the controls being hardened before broader intake. Certification, audit, and legal claims are made only when supporting evidence exists.

Back to Trust centre