Dokumen ini hanya tersedia dalam bahasa Inggeris.
This page lists the third-party sub-processors that Taqyid (operated by DIGIQUEST CONSULTING) engages to process personal data on behalf of our customers. This list is maintained in accordance with GDPR Article 28 and our Data Processing Agreement. We will notify customers at least 30 days before adding or replacing a sub-processor.
| Provider | Purpose | Data Processed | Location | DPA Status |
|---|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, serverless functions | Application data, access logs, IP addresses | Singapore (application functions); global edge network | DPA in place |
| Supabase Inc. | User authentication, file storage (uploaded documents) | User credentials, authentication tokens, uploaded files (certificates, audit documents) | Singapore (Asia-Pacific) | DPA in place |
| Neon Inc. | PostgreSQL database (primary application data store) | All application data including user profiles, compliance records, audit data | Singapore (Asia-Pacific) | DPA in place |
| PostHog Inc. | Product analytics in the application and, with your consent, on taqyid.com | Feature usage events and session recordings (form fields masked), linked to the user account in the application | European Union (EU Cloud) | DPA in place |
| Resend Inc. | Transactional email delivery | Email addresses, email content (notifications, alerts) | Japan (Tokyo) | DPA in place |
| Sentry (Functional Software Inc.) | Error monitoring and performance tracking (app.taqyid.cloud) | Error logs, stack traces, browser metadata, IP addresses | European Union (Germany) | DPA in place |
| Anthropic PBC | AI-generated compliance analysis and audit-readiness reports | Compliance record content submitted for analysis (may include personal data contained in those records) | United States | DPA in place |
| Upstash Inc. | Redis-based caching (session management, rate-limiting) | Session identifiers, rate-limit counters | Singapore (Asia-Pacific) | DPA in place |
| Hostinger International Ltd | Hosting of our self-hosted n8n instance (workflow automation: lead management, onboarding, operational notifications) | Email addresses, company names, workflow event data | France (Paris) | DPA in place |
| Brevo (Sendinblue SAS) | Transactional and marketing email | Email addresses, email engagement data (opens, clicks) | France / European Union | DPA in place |
| Google LLC | Analytics (Google Analytics 4) — activated with consent only | Anonymised usage statistics, page views, session data | United States / Ireland | DPA in place |
| Stripe Payments Europe Ltd | Payment processing for paid subscriptions (checkout, invoicing, refunds) | Billing identity (organisation name, billing address, billing email), tokenised payment method, transaction records | Ireland / United States | Stripe DPA in place |
Changes to this list
We maintain a record of changes to our sub-processor list below:
- 4 October 2026: Corrected processing locations (verified on 1 October 2026; these locations were already in place before this entry was published): Vercel application functions run in Singapore; Sentry data is hosted in the European Union (Germany). Resend processes data in Japan (Tokyo) and Upstash in Singapore. Our n8n instance is self-hosted on a Hostinger International Ltd server in France (Paris); it replaces the n8n GmbH entry, which does not process any data. Clarified the PostHog purpose and the data it processes.
- 12 September 2026: Added Stripe Payments Europe Ltd (payment processing for paid subscriptions).
- 3 September 2026: Added Anthropic PBC (AI-generated compliance analysis reports).
- 16 April 2026: Initial publication of the sub-processor list. Added PostHog, Upstash, and n8n (previously unlisted).
Objection process
If you object to the addition of a new sub-processor on reasonable data protection grounds, you may notify us within 30 days of the notification. We will work with you to find a resolution. If no resolution can be reached, you may terminate the affected service in accordance with our Terms of Service.
Contact our DPO at dpo@taqyid.cloud for any questions about our sub-processors.