Sub-processors
Third parties that may process customer data when you use ReguNav. Customers will be notified at least 30 days before any new sub-processor is added.
| Sub-processor | Purpose | Region | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Edge compute + DDoS + CDN + WAF | Global | TLS 1.3 + private network ACL |
| Neon, Inc. | Postgres database (serverless) | US-East | TLS + at-rest AES-256 |
| ClickHouse, Inc. | OLAP database (audit-trail, drift) | Frankfurt eu-central-1 | TLS + at-rest AES-256 |
| Stripe, Inc. | Payment processing + metered billing | US-East | PCI DSS Level 1; we never see PAN |
| Clerk, Inc. | Authentication, SSO, SAML, OIDC, SCIM | US-East | OIDC + SOC 2 Type II |
| Cerbos Inc. | Authorization (Cerbos Hub) | US/EU | ABAC bundle ships to our edge |
| GitHub, Inc. | Source control + CI | US-East | 2FA enforced for all org members |
| Meilisearch | Full-text search (V1.5) | EU | Per-tenant index isolation |
Subscribe to sub-processor change notifications: trust@regunav.com