Supabase
Supabase Inc
- Purpose
- Database (PostgreSQL), user authentication, and file storage
- Data Location
- Sydney, Australia (AWS ap-southeast-2)
- Certifications
- SOC 2 Type II
- Privacy Policy
- supabase.com/privacy
Trust › Sub-processors
Sub-processor List
Last updated: 1 April 2026
RedRock Systems engages the following third-party sub-processors to deliver the Services. Each sub-processor is bound by a Data Processing Agreement and handles personal information only as instructed by RedRock Systems. We will provide at least 30 days’ notice before adding any new sub-processor.
| Sub-processor | Purpose | Data Location | Certifications | Privacy Policy |
|---|---|---|---|---|
| Supabase Supabase Inc | Database (PostgreSQL), user authentication, and file storage | Sydney, Australia (AWS ap-southeast-2) | SOC 2 Type II | supabase.com/privacy |
| Vercel Vercel Inc | Application hosting, serverless functions, edge CDN, and privacy-preserving analytics | Global edge network (primary infrastructure: United States) | SOC 2 Type II | vercel.com/legal/privacy-policy |
| Stripe Stripe Inc | Payment processing, subscription billing, and fraud detection | Global (primary infrastructure: United States) — PCI DSS Level 1 certified | PCI DSS Level 1 | stripe.com/privacy |
| Resend Resend Inc | Transactional email delivery (account notifications, receipts, security alerts) | United States | — | resend.com/legal/privacy-policy |
Vercel
Vercel Inc
- Purpose
- Application hosting, serverless functions, edge CDN, and privacy-preserving analytics
- Data Location
- Global edge network (primary infrastructure: United States)
- Certifications
- SOC 2 Type II
- Privacy Policy
- vercel.com/legal/privacy-policy
Stripe
Stripe Inc
- Purpose
- Payment processing, subscription billing, and fraud detection
- Data Location
- Global (primary infrastructure: United States) — PCI DSS Level 1 certified
- Certifications
- PCI DSS Level 1
- Privacy Policy
- stripe.com/privacy
Resend
Resend Inc
- Purpose
- Transactional email delivery (account notifications, receipts, security alerts)
- Data Location
- United States
- Certifications
- —
- Privacy Policy
- resend.com/legal/privacy-policy
Notice of changes: This list was last updated on 1 April 2026. We will provide at least 30 days’ notice via email and an update to this page before engaging any new sub-processor. If you object to a new sub-processor, you may terminate your subscription in accordance with our Terms of Service.
REDROCK SYSTEMS PTY LTD · ABN 53 696 760 433 · ACN 696 760 433 · Perth, Western Australia · hello@redrocksystems.com.au