Sub-processors
Last updated September 30, 2026
Ankord Labs engages the third parties listed below to help provide, secure and support ComplyMo. Each direct sub-processor is bound by written terms requiring it to protect Customer Personal Data and process it only as permitted by Ankord Labs. Where an underlying infrastructure provider is identified, it is engaged through the applicable direct sub-processor and protected through that provider's contractual obligations. The categories of processing described below are high-level descriptions and may be updated as the Service develops.
How we manage changes
We give at least thirty (30) days' notice before a new or replacement sub-processor begins processing Customer Personal Data. We provide notice by updating this page and notifying subscribers. Customers may object on reasonable, documented data protection grounds within that period, and the process for doing so is set out in Section 5 of our Data Processing Addendum.
We will provide notice of material additions or replacements to this list by updating this page and, where practicable, by notice to the email address associated with the customer account.
Where a change is required urgently to protect the security, integrity or continuity of the Service or to comply with a legal obligation, we may make it immediately and will notify customers as soon as reasonably practicable, at which point the same objection process applies from the date of notice.
Current sub-processors
| VENDOR | PURPOSE | PROCESSING LOCATION | DATA PROTECTION TERMS | TRANSFER MECHANISM |
|---|---|---|---|---|
| Vercel Inc. | Application hosting, edge delivery, serverless functions and deployment | United States; global edge delivery and operational failover may involve other locations | Standard DPA incorporated into provider terms | EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework, where current and applicable; SCCs as a fallback |
| Databricks, Inc. (Neon service) | Managed PostgreSQL database | United States (AWS US East) | Databricks DPA with Neon product terms | Applicable Data Privacy Framework participation, where current and applicable; SCCs as a fallback |
| Amazon Web Services, Inc. | Infrastructure supporting the database service | United States | Indirect, through Databricks | Transfer safeguards maintained through Databricks |
| Anthropic, PBC | AI-assisted website review, troubleshooting assistance and public regulatory or standards-related summaries | United States | Anthropic DPA incorporated into its commercial terms | SCC Modules Two and Three, together with applicable UK and Swiss terms; Anthropic is not relied on as Data Privacy Framework-certified |
| Plus Five Five, Inc. (Resend) | Transactional and service-related email | United States | Resend standard DPA | EU-U.S. Data Privacy Framework and UK Extension to the EU-U.S. Data Privacy Framework, where current and applicable; SCCs, including for Swiss transfers and as a fallback |
Where required, a provider's transfer mechanism may include an adequacy decision or certification, the Standard Contractual Clauses, the UK Addendum, Swiss adaptations or another valid mechanism. Applicable certifications are monitored and are not relied on outside their legal scope.
Other service providers
The following providers support Ankord Labs' own billing and public-website operations. They do not process Customer Personal Data as Sub-processors under the DPA unless their role changes and they are added to the table above under the applicable notice process.
| VENDOR | PURPOSE | LOCATION | ROLE AND TERMS |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | United States | Processes Ankord Labs account and billing information and may act as a processor or independent controller under its applicable terms |
| Google LLC | Analytics for the ComplyMo public website and signup pages | United States | Processes Ankord Labs website analytics information under Google's applicable data-processing terms |
Questions
Contact privacy@complymo.com with questions about this page or to subscribe to Sub-processor change notices.
