Last updated: March 25, 2026
CaseProof uses the following third-party vendors to deliver its services. Each vendor is bound by a data processing agreement and operates under recognized security certifications.
| Vendor | Purpose | Location | Security Info |
|---|---|---|---|
| Vercel | Application hosting and CDN | USA (global edge) | SOC 2 Type II |
| Supabase | Database, authentication, file storage | USA (AWS us-east-1) | SOC 2 Type II |
| OpenAI | AI text generation (GPT-4o) | USA | SOC 2 Type II; no training on API data |
| Stripe | Payment processing | USA | PCI DSS Level 1 |
To request a Data Processing Agreement (DPA) covering these subprocessors, see the DPA & GDPR page.
Questions about subprocessors can be directed to legal@case-proof.com.