Sub-processors
Last updated: 16 April 2026
This page lists the third-party sub-processors that Taqyid (operated by DIGIQUEST CONSULTING) engages to process personal data on behalf of our customers. This list is maintained in accordance with GDPR Article 28 and our Data Processing Agreement. We will notify customers at least 30 days before adding or replacing a sub-processor.
| Provider | Purpose | Data Processed | Location | DPA Status |
|---|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, serverless functions | Application data, access logs, IP addresses | United States (global CDN) | DPA in place |
| Supabase Inc. | User authentication, file storage (uploaded documents) | User credentials, authentication tokens, uploaded files (certificates, audit documents) | Singapore (Asia-Pacific) | DPA in place |
| Neon Inc. | PostgreSQL database (primary application data store) | All application data including user profiles, compliance records, audit data | Singapore (Asia-Pacific) | DPA in place |
| PostHog Inc. | Product analytics and user behaviour tracking | Feature usage data, session data, anonymised interaction logs | European Union (EU Cloud) | DPA in place |
| Resend Inc. | Transactional email delivery | Email addresses, email content (notifications, alerts) | United States | DPA in place |
| Sentry (Functional Software Inc.) | Error monitoring and performance tracking (app.taqyid.cloud) | Error logs, stack traces, browser metadata, IP addresses | United States | DPA in place |
| Upstash Inc. | Redis-based caching (session management, rate-limiting) | Session identifiers, rate-limit counters | United States / European Union | DPA in place |
| n8n GmbH | Workflow automation (lead management, onboarding, operational notifications) | Email addresses, company names, workflow event data | European Union (dedicated VPS) | DPA in place |
| Brevo (Sendinblue SAS) | Transactional and marketing email | Email addresses, email engagement data (opens, clicks) | France / European Union | DPA in place |
| Google LLC | Analytics (Google Analytics 4) — activated with consent only | Anonymised usage statistics, page views, session data | United States / Ireland | DPA in place |
Changes to this list
We maintain a record of changes to our sub-processor list below:
- 16 April 2026: Initial publication of the sub-processor list. Added PostHog, Upstash, and n8n (previously unlisted).
Objection process
If you object to the addition of a new sub-processor on reasonable data protection grounds, you may notify us within 30 days of the notification. We will work with you to find a resolution. If no resolution can be reached, you may terminate the affected service in accordance with our Terms of Service.
Contact our DPO at dpo@taqyid.com for any questions about our sub-processors.