Trust
Sub-processors
Third parties WikiSure uses to deliver the service. We notify customers of material changes in advance via the email address registered on the account.
Last updated: 2026-06-13
| Provider | Purpose | Region | Data categories |
|---|---|---|---|
| Lovable Cloud | Application hosting, CDN, edge functions | European Union | Tenant content, uploaded documents (in transit + at rest) |
| Supabase | Managed Postgres database, authentication, object storage | EU — AWS Frankfurt (eu-central-1) | User accounts, tenant data, uploaded documents, derived findings, audit logs |
| Amazon Web Services (AWS) | Underlying compute, storage, network for Supabase | EU — Frankfurt (eu-central-1) | Encrypted database and object-storage volumes |
| Cloudflare | DNS, TLS termination, edge runtime for SSR | Global edge; EU-resident PoPs for EU traffic | Request metadata, TLS-terminated traffic |
| Resend | Transactional email delivery (auth, notifications) | European Union | Recipient email, message subject and body |
| Lovable AI Gateway | AI inference for concept extraction and drift analysis | European Union | Document text passed to model providers for inference; outputs are NOT used to train shared models |
Notifications & objections
We notify customers at least 30 days before adding a new sub-processor that materially affects the processing of their data. Customers may object in writing within that window; if we cannot accommodate the objection, the customer may terminate the affected service for cause.