Sub-processors

We engage the sub-processors below to deliver the Hael service. Each is bound by data-protection terms no less protective than our DPA and is reviewed before engagement.

How we notify you of changes

Before engaging any new sub-processor, we provide 30 days' notice to customers. Subscribe via the RSS feed or by emailing trust@hael.ai to join the sub-processor notification list.

You may object to a new sub-processor on reasonable data-protection grounds within the notice period by emailing dpo@hael.ai.

Current sub-processors

| Category | Purpose | Provider | Region | | --- | --- | --- | --- | | Database, authentication, storage, edge functions | Primary application database, user authentication, object storage, and edge compute | Supabase | EU | | Application hosting & edge network | Serving the marketing site and application over the global edge network | Cloudflare | Global edge (EU-first routing) | | Transactional email | Delivery of platform, security, and lead-notification email | Resend | EU / US | | Error monitoring | Runtime error reporting and alerting | Sentry | EU |

International transfers

Where a sub-processor is located outside the UK / EEA, transfers are protected by the EU Standard Contractual Clauses (2021/914) and the UK IDTA / UK Addendum (B1.0), together with a documented Transfer Impact Assessment where required.

Questions

Email dpo@hael.ai or trust@hael.ai.