Saftix — Subprocessors
This page lists the third parties Saftix uses to operate the service. It is updated at least 30 days before any new subprocessor is added. Updated: 05.10.2026.
Customer content is processed and stored inside the EU. The one exception to „inside the EU" is transit: saftix.bg is served through Vercel's edge network, so a request travels via the point of presence nearest the visitor before it reaches the EU origin. Nothing is stored there, and nothing outside this table receives customer content.
Active subprocessors
| Subprocessor | Purpose | Location | DPA |
|---|---|---|---|
| Supabase | Authentication, Postgres database, file storage | EU (Stockholm) | Supabase DPA |
| Railway | Application hosting — the API container that reads uploads, builds files and runs checks | EU | Railway DPA |
| Vercel | Static site and edge routing — serves saftix.bg and forwards /api/* to Railway |
Global edge network; requests are forwarded to the EU origin and nothing is stored at the edge | Vercel DPA |
| Paddle | Billing / Merchant of Record for EU/EEA customers | Dublin, Ireland | Paddle DPA |
| Resend (optional — sends account and form email) | Transactional email (verification, password reset, security alerts), and the messages sent through the site's access and contact forms, including a file attached to a question | EU region when available | Resend DPA |
| Sentry (optional) | Error tracking | EU region | Sentry DPA |
No AI processing
Saftix does not send customer data to any language model, machine-learning API, or hosted document-recognition service. Documents are read, files are built and checks are run using the infrastructure listed above; no other party receives customer content. There is no AI vendor on this list because there is none in the product.
This is also why a value that cannot be determined from the documents you supplied is held for your review rather than predicted. A filing is not a place for a confident guess.
Notification of change
Saftix will notify customers of any proposed addition or replacement of a subprocessor at least 30 days in advance, by email and by updating this page. Customers may object in writing within 14 days of notice; absent objection the change is deemed accepted.