Sub-processors
Parties that may process personal data on behalf of TitreSimple (Art. 28). Prefer EU regions where configurable. This list matches the public privacy notice.
Vercel
Application hosting / edge
Region: Configurable; prefer EU (e.g. fra1 / EU projects)
DPA: Vercel DPA available
Clerk
Authentication & session management
Region: See Clerk data residency settings
DPA: Clerk DPA available
Anthropic
Transient OCR / document field extraction
Region: API processing; no TitreSimple file archive
DPA: Anthropic commercial terms / DPA as contracted
Supabase
Optional short-lived dossier Postgres
Region: Prefer eu-west-3 (Paris) / EU
DPA: Supabase DPA available
OCR runs only with purpose ai_ocr_validation. Document bytes are not retained by TitreSimple after the check.
Questions: dpo@titresimple.app · Privacy notice