Sub-processor List
List of third parties that process personal data on our behalf in connection with providing Pritect.ai.
Pritect runs the open-source Supabase platform itself, on its own Microsoft Azure infrastructure in the UAE. Supabase, Inc. has no access to customer data and is therefore not a sub-processor. Services marked as planned are selected for this deployment but do not process customer data until we switch them on and update this list.
Microsoft Azure
(Microsoft Ireland Operations Limited)
Microsoft Azure
(Microsoft Ireland Operations Limited)
Service
Cloud infrastructure
Purpose
Virtual machines and managed disks that run the Pritect application, its database, authentication, file storage for uploaded evidence and attachments, and server-side functions. Pritect operates this software itself; Microsoft provides the infrastructure.
Azure Storage
(Microsoft Ireland Operations Limited)
Azure Storage
(Microsoft Ireland Operations Limited)
Service
Encrypted backup storage
Purpose
Encrypted copies of the database, uploaded files and configuration, taken every 30 minutes for disaster recovery. Geo-redundant storage replicates within the UAE only.
Azure Communication Services
(Microsoft Ireland Operations Limited)
PlannedAzure Communication Services
(Microsoft Ireland Operations Limited)
PlannedService
Transactional email
Purpose
Notifications, assessment invitations, training reminders, data subject request notifications and workflow alerts, with the service data location set to the United Arab Emirates.
Azure OpenAI
(Microsoft Ireland Operations Limited)
PlannedAzure OpenAI
(Microsoft Ireland Operations Limited)
PlannedService
Large language model
Purpose
AI-assisted drafting and analysis features, using a Standard regional deployment so prompts and responses are processed in UAE North. AI features stay switched off on this deployment until in-region processing is confirmed for the chosen model.
Updates to this list
We update this list when we add, replace, or materially change our sub-processors.