JustAutomateIt uses the following third-party service providers ("subprocessors") to help deliver our services. Each subprocessor is bound by data protection obligations and maintains appropriate security certifications.
Last updated: June 13, 2026
| Subprocessor | Purpose | Data Categories | Location | Compliance |
|---|---|---|---|---|
| Supabase | Database and backend services | Contact details, engagement and enquiry data | US / EU (AWS) | SOC 2 Type IIGDPRHIPAA |
| Vercel | Website hosting and edge delivery | IP addresses, cookies, access logs | Global (AWS) | SOC 2 Type IIGDPRISO 27001 |
| Stripe | Payment processing (where card payment is used) | Billing information, payment methods | US / EU | PCI DSS Level 1SOC 2 Type IIGDPR |
| Anthropic | AI models used in service delivery | Prompts and documents processed during engagements | US | SOC 2 Type IIGDPR |
| OpenAI | AI models used in service delivery | Prompts and documents processed during engagements | US | SOC 2 Type IIGDPR |
| Resend | Transactional email delivery | Email addresses, email content | US | SOC 2 Type IIGDPR |
| Calendly | Call scheduling | Name, email address, meeting details | US | SOC 2 Type IIGDPR |
| n8n | Workflow automation engine | Workflow data, integrations, automation logs | EU (self-hosted) | GDPRISO 27001 |
Database and backend services
Contact details, engagement and enquiry data
Website hosting and edge delivery
IP addresses, cookies, access logs
Payment processing (where card payment is used)
Billing information, payment methods
AI models used in service delivery
Prompts and documents processed during engagements
AI models used in service delivery
Prompts and documents processed during engagements
Workflow automation engine
Workflow data, integrations, automation logs
We may update this list when we engage new subprocessors or change existing ones. Material changes will be communicated to active clients at least 30 days before the change takes effect.
To receive notifications about subprocessor changes or to raise concerns, please contact us at support@just-automate-it.org.
All subprocessors are contractually required to:
For international data transfers, we rely on EU Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.