---
title: "Fohrkast Sub-processors Register"
description: "The third parties Fohrkast uses to process data, including their purpose, data location, and transfer safeguards under EU law."
canonical: "https://fohrkast.com/sub-processors"
group: "Legal"
updated: "2026-06-28"
---
# Sub-processors

Fohrkast uses third-party sub-processors to deliver its service. This page lists each sub-processor, their purpose, and the region where data is processed. The register is updated before any new sub-processor is added to production. This page provides general information about Fohrkast's operations and is not legal advice.

**Last updated: 27 June 2026**

## Sub-processors table

| Sub-processor | Purpose | Data location |
|---|---|---|
| Supabase | Postgres database, authentication, and file storage | EU – Frankfurt (eu-central-1) |
| Vercel | Application hosting, edge delivery, logs, and deployments | EU – Frankfurt (fra1) |
| Lemon Squeezy (a Stripe company) | Merchant of record for paid plans: checkout, subscriptions, invoices, customer portal, EU VAT and global tax, and payment processing. Lemon Squeezy is the seller of record and issues the invoice. Operated by Sold Through Link, LLC (formerly Lemon Squeezy LLC). | United States (Standard Contractual Clauses apply for EEA transfers) |
| Resend | Transactional email (account, document, and accessibility notices) | To confirm |
| Sentry | Application error monitoring and performance diagnostics | To confirm |
| Groq, Google Gemini, Cerebras, OpenRouter | AI document drafting and scan summaries on minimised and redacted prompt data, selected by automatic failover | Outside the EEA (no personal data sent; SCCs/safeguards where relevant) |

## Transfer safeguards

Personal data is hosted in the EU where product controls allow it. Where a sub-processor involves a transfer of personal data outside the EEA, Fohrkast relies on the European Commission's Standard Contractual Clauses together with supplementary measures, and reviews each sub-processor before adding it to production.

The Fohrkast operator is established in India, a third country without an EU adequacy decision, and accesses personal data from there to run and support the service. This access is a transfer under Chapter V of the GDPR; Fohrkast is implementing the appropriate Chapter V safeguards for it.

For full details on Fohrkast's security posture, see the Trust & Security page and the privacy policy.

## Frequently asked questions

**Where is my data stored?**
Data is kept in the EU (Frankfurt) where possible. Sub-processors in the United States and outside the EEA are protected by Standard Contractual Clauses and supplementary measures as required under EU law.

**What data do AI providers (Groq, Gemini, etc.) receive?**
Optional AI document polishing is off by default and runs only when the operator enables it with an explicit opt-in flag. When it is on, the document text is sent to these providers after direct identifiers (names, addresses, email and company numbers) are redacted, so the personal data exposed is minimised. We do not claim that none reaches them. These free-tier AI providers are not yet under an executed Article 28 data-processing agreement or transfer safeguard with Fohrkast, so treat enabling polishing as a transfer outside the EEA without those safeguards in place. When polishing is off, no document content is sent to these providers.

**How does Fohrkast handle cross-border transfers?**
For sub-processors outside the EEA, Fohrkast uses the European Commission's Standard Contractual Clauses together with supplementary measures, and reviews each sub-processor before production use.

**When do you add new sub-processors?**
This register is updated before any new sub-processor is added to production.

## About Fohrkast

Fohrkast is an AI-first EU compliance and document automation tool that operates a website scanner and consent widget. Fohrkast provides automated readiness checks and helps organisations understand their legal and accessibility status. The service is not a substitute for professional legal or compliance advice.

---

Source: https://fohrkast.com/sub-processors
This is automated readiness information, not legal advice or a guarantee of conformance. Last reviewed 2026-06-28.