Sub-processors
Last updated: 1 June 2026 · Version 1.0
Calion engages the sub-processors below to deliver the Service. Each is bound by a Data Processing Agreement containing terms no less protective than our DPA and is required to apply appropriate technical and organisational measures.
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge delivery, build pipeline. | Global edge; primary compute regions: London (lhr1) / Dublin (dub1). | DPA, EU SCCs, UK IDTA, SOC 2 Type II, ISO 27001. |
| Neon Inc. | Managed PostgreSQL database. | EU (Frankfurt, eu-central-1). | DPA, EU SCCs, SOC 2 Type II. |
| Resend, Inc. | Transactional email delivery (account, security, notifications). | USA, with EU forwarding region available. | DPA, EU SCCs, UK IDTA. |
| Anthropic PBC | AI inference for underwriting assistance and in-app features. Zero-retention API; prompts and outputs are not used for model training. | USA. | DPA, EU SCCs, SOC 2 Type II, EU-US Data Privacy Framework certification. |
| Voyage AI | Text embeddings for document search and RAG features. | USA. | DPA, EU SCCs. |
Changes
We will give at least 14 days' advance notice of any addition or replacement by updating this page. To subscribe to email notifications of changes, contact privacy@calion.ie. Customers with a signed DPA may object to a new sub-processor on reasonable data-protection grounds within the notice period.
Onward sub-processors
Some sub-processors above use their own sub-processors (for example, infrastructure providers). Each maintains its own list, linked from the provider name above. Calion remains responsible to its customers for sub-processor activities under our DPA.