Subprocessors
shepi (operated by SMB EDGE) uses the following third-party subprocessors to deliver and support our services. This page is maintained in accordance with our obligations under applicable data protection laws, including the UK GDPR and Canadian PIPEDA.
| Subprocessor | Purpose | Data Processed | Certifications | Location |
|---|---|---|---|---|
| Supabase (Lovable Cloud) | Database, authentication, file storage, edge functions | All user and project data | SOC 2 Type II · HIPAA available | United States (AWS) |
| Amazon Web Services | Underlying compute, network, and storage for Supabase | All user and project data (encrypted at rest) | SOC 1 / 2 / 3 Type II · ISO 27001 / 27017 / 27018 · PCI DSS L1 · HIPAA-eligible | United States (us-east) |
| Stripe | Payment processing | Billing information, email address | PCI DSS Level 1 · SOC 1 / 2 Type II | United States |
| Vercel (AI Gateway) | AI model routing for document parsing, financial analysis, narrative generation, and vector embeddings. Operates under a Zero Data Retention agreement; upstream model providers (Anthropic Claude, OpenAI) process requests as sub-processors under no-retention terms. | Financial data and document contents sent for analysis | SOC 2 Type II · ISO 27001 · GDPR | United States |
| Termageddon | Legal policy hosting | None (policies only) | — | United States |
| Usercentrics | Cookie consent management | Cookie preferences, IP address | ISO 27001 | Germany (EU) |
Last updated: June 16, 2026
If you have questions about our subprocessors, please contact us at hello@shepi.ai.