Last Updated: May 25, 2026

Subprocessors

BESTulaba LLC uses the following third-party subprocessors to operate BESTcyberIQ. Each provider processes data only as necessary to deliver the Service.

Last updated: May 25, 2026. We will update this page when subprocessors are added or removed.

Provider	Purpose	Data Processed	Location	Privacy / Security Docs
Supabase	Database, authentication, Row Level Security	Account data, assessment responses, company profiles, audit logs	United States (AWS)	supabase.com/security
Vercel	Application hosting, edge network, DDoS protection	Request logs, IP addresses, session data	United States / Global CDN	vercel.com/security
Stripe	Payment processing	Payment method details, billing address, transaction history	United States	stripe.com/privacy
Resend	Transactional email delivery	Email address, email content (notifications, reports)	United States	resend.com/privacy
Railway	PDF report generation microservice	Assessment data passed at report generation time; not persisted	United States	railway.app/legal/privacy
Sentry	Production error monitoring and alerting	Error stack traces, browser/device info, anonymized session context	United States	sentry.io/privacy
GitHub	Source code hosting, dependency security scanning	Source code only; no customer data	United States	github.com/security

Note: BESTcyberIQ does not use advertising networks, analytics platforms that track individual users, or AI training data pipelines. Your assessment data is never used to train machine learning models.

Questions about our subprocessors? Email william@bestcyberiq.com.