Subprocessors
Subprocessors.
The services Thesmios uses or plans to use for hosting, email, analytics, and AI processing.
| Name | Purpose | Location | Privacy notice |
|---|---|---|---|
| Vercel | Hosting and deployment | United States | View notice |
| AWS | Data hosting and storage | United Kingdom | View notice |
| Resend | Transactional email | United States | View notice |
| Plausible | Privacy-friendly analytics | European Union | View notice |
| OpenAI or Anthropic | AI processing where used | United States | View notice |
Change notification.
Material subprocessor changes are handled as security-scoped procurement notices. Thesmios records the reason, data categories, transfer basis, objection window, and customer-impact decision before attaching approval or accepted exclusions to the launch record.
Standard notice window: 30 days
Notices use security status subscriptions and the protected status broadcast route. Urgent security, availability, or compliance changes may be made sooner when the rationale is recorded.
- Change summary and affected services
- Subprocessor name, purpose, location, and privacy notice
- Data categories and transfer mechanism
- Notice date, objection deadline, and emergency exception if applicable
- Customer-impact decision and rollback/replacement option