Legal · Subprocessors
Subprocessor List
Ryniqo maintains a deliberately small subprocessor set. Each subprocessor is contractually bound to data protection obligations no less protective than those in our DPA. We publish material changes at least 30 days in advance where customer notice is required.
| Version | 2.0 | Effective | On publication |
|---|---|---|---|
| Supersedes | — | Governing law | Estonia · EU |
Section 01
Current subprocessors
| Subprocessor | Purpose | Data categories | Hosting region | Transfer safeguard |
|---|---|---|---|---|
| Lovable (Lovable AB) | Application hosting, edge delivery, build pipeline | Application data, request metadata | European Union | Intra-EEA |
| Supabase (Supabase Inc.) | Managed Postgres database, authentication, storage | Account data, assessment responses, briefs | European Union (project region) | Intra-EEA; SCCs where support is provided from outside the EEA |
Section 02
Planned subprocessors
The following subprocessors are planned. They will be added to the current list with 30 days' notice before first use for any customer that has requested change notifications.
| Subprocessor | Purpose | Status |
|---|---|---|
| Transactional email provider | Account and notification email delivery | Selection in progress |
| Scheduling provider | Executive Review booking calendar | Selection in progress |
| Product analytics provider | Aggregated usage analytics | Selection in progress |
Section 03
Notifications
To subscribe to change notifications, write to privacy@ryniqo.com with the subject “Subprocessor notifications”. Objections may be raised on reasonable, documented data-protection grounds and are handled under Section 06 of the DPA.