Subprocessor List
Last verified July 16, 2026.
These are the third-party service providers (“subprocessors”) Citation Safe (Digital Empire LLC) uses to operate the Service, verified against what is actually deployed in our codebase and environment configuration — not a generic template list. We do not sell data to any of these providers, and each processes data only as needed to perform the function listed below.
| Subprocessor | Purpose | Data handled | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, TLS termination, build/deploy pipeline. | All request traffic passes through Vercel's edge network. No document content is persisted by Vercel beyond request handling. | United States |
| Supabase Inc. | Primary database (Postgres) -- accounts, billing metadata, citation/verification records, audit log. | Account emails, authentication data, verification history, billing metadata, document hashes (not full document text by default). | United States (project region) |
| Stripe, Inc. | Payment processing and subscription billing. | Payment card data (never touches our servers directly), billing address, subscription status. | United States |
| Resend | Transactional email delivery (account confirmations, billing/dunning notices, verification result emails). Never used for cold outreach. | Recipient email address, email content (transactional only). | United States |
Public citation sources (not subprocessors)
Verification checks query public authoritative sources — for example CourtListener / Free Law Project (case law), Cornell LII and eCFR (tax statutes/regulations), NCBI E-utilities and Crossref (medical), and acquisition.gov / gao.gov (government contracts). These are read-only public lookups of the citation you submit, not vendors we send your account or billing data to, so they are listed here for transparency but are not “subprocessors” in the GDPR Article 28 sense.
Changes to this list
We update this page in the same change that adds or removes a subprocessor from the running Service. Customers who want advance notice of subprocessor changes for their own compliance tracking can request it at support@citationsafe.com.
See also: Security · Data Processing Addendum (template) · Privacy policy
Digital Empire LLC · 30 N Gould St Ste N, Sheridan, WY 82801.