Legal

Sub-processor List

Last updated: June 2026

PrimusReview uses the following third-party sub-processors to deliver its service. Each sub-processor has been assessed for compliance with UK GDPR and appropriate data processing agreements are in place.

Sub-processorPurposeLocationCertification

Supabase Inc.

Database, authentication, and file storage. Stores all account data, review data, annotations, and uploaded documents.AWS eu-west-2 (UK)SOC 2 Type II

Anthropic PBC

AI model processing. Document content submitted for review is sent to Anthropic's Claude API for compliance analysis.United StatesAPI DPA

Vercel Inc.

Application hosting, serverless function execution, and global content delivery.US / EU EdgeSOC 2 Type II

Stripe Inc.

Payment card processing and subscription management. PrimusReview does not store card data.United States / EUPCI DSS L1

Resend Inc.

Transactional email delivery (welcome emails, account confirmation, password reset).United StatesSOC 2

Google LLC

Business email (Google Workspace) used for customer communications.US / EUISO 27001

Upstash Inc.

Rate limiting counters via serverless Redis. No personal data is stored — only anonymous request counters.EU WestSOC 2

Cloudflare Inc.

CAPTCHA verification on signup (Turnstile). IP addresses processed transiently for bot detection.United States / EUISO 27001

Sentry Inc.

Error monitoring. Error reports may include stack traces and limited request context. No document content is included.European UnionSOC 2 Type II

AssemblyAI Inc.

Audio/video transcription for the Video Review feature. Uploaded audio/video content is transmitted to AssemblyAI to generate a timestamped transcript, which is then reviewed by Anthropic's Claude API.United StatesSOC 2 Type II

We will notify customers of any material changes to this sub-processor list with reasonable advance notice. If you object to the addition of a new sub-processor, please contact us at thompson.daniel@primusreview.com.

This list is reviewed and updated quarterly or when sub-processors change.