This page lists the third-party services Sellexio uses to operate the platform. It is maintained by Sellexio and updated when subprocessors change. Customers may subscribe to updates by emailing legal@sellexio.co.
| Subprocessor | Purpose | Region | Data shared |
|---|---|---|---|
| Supabase / AWS | Primary database, authentication, file storage | US-East (Virginia) | Claim records, documents, user accounts |
| Cloudflare Workers | Application hosting, edge compute, CDN | Global edge | Request payloads, session cookies |
| Stripe, Inc. | Payment processing, subscription billing, success-fee invoicing | US, EU | Billing email, payment method tokens, invoice line items |
| Resend / gdcs.me MX | Transactional email delivery (auth, notifications, invoices) | US | Recipient email, subject, message body |
| OpenAI, LLC (gpt-4o-mini) | Document extraction, claim drafting, company intel scans | US (with SOC 2 Type II) | Redacted document text; no PII enrichment. Zero-retention endpoint. |
| Google (Gemini via Lovable AI Gateway) | Backup extraction, fraud narratives | US, EU | Redacted document text |
| Datalastic | AIS vessel position & fleet lookup | EU | IMO numbers, vessel names (no customer data) |
| Hunter.io | Public professional email discovery for prospecting | EU (France) | Company domains only |
| OpenSanctions | Sanctions screening on vessels & counterparties | EU (Germany) | Vessel IMO, entity names (public data) |
| Open-Meteo | Weather routing, port congestion inputs | EU (Germany) | Port coordinates (no customer data) |
| Huntress | Managed detection & response (MDR), EDR, SOC 2 evidence collection | US | Endpoint telemetry, security events, audit evidence (no claim content) |
Sellexio will provide at least 30 days' written notice before adding or replacing a subprocessor that processes Personal Data. Customers on Enterprise plans may object in writing within 15 days; if the objection cannot be reasonably resolved, either party may terminate the affected service without penalty.