Legal
Sub-processors
The third parties that help us run CaseThread, what they do, and where they operate.
Last updated: Draft — pending counsel sign-off
Draft. This page is a placeholder pending legal review — not yet binding.
About this list
We use the vetted sub-processors below to provide the service. Each is bound by appropriate data-protection terms. We'll update this list before adding or changing a material sub-processor.
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication and file storage | EU — bound by DPA (POPIA §72) |
| Vercel | Application hosting and the scheduled reminder job | EU / global — bound by DPA |
| Resend | Transactional email (confirmations, reminders, invites) | EU / global — bound by DPA |
| PayFast | Subscription payment processing (ZAR) | South Africa |
More: Privacy Policy · Terms of Service · PAIA Manual · Data Processing Agreement