Sub-processors
Last updated: May 14, 2026
We use the following trusted vendors to operate PassCryp. We commit to giving at least 30 days' advance notice before adding or replacing a sub-processor. To receive these notices, email privacy@passcryp.com.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Managed Postgres database, authentication, file storage | EU (primary) / US |
| Cloudflare | Edge hosting, CDN, DDoS protection, DNS | Global |
| Stripe | Payment processing and billing | US / EU |
| Resend | Transactional email (sign-in, receipts, alerts) | US |
| Optional Google sign-in (OAuth) | US | |
| Have I Been Pwned | Anonymised password breach checks (k-anonymity, only first 5 SHA-1 chars sent) | Global CDN |
Want notification of changes? Email privacy@passcryp.com. None of these vendors can read your encrypted vault content.