Skip to content

Sub-processors

AuditLink, Inc. engages the following third-party service providers (sub-processors) to deliver the AuditLink platform. Each is contractually bound to handle customer data only on our documented instructions and to maintain security controls equivalent to ours. We review every sub-processor before onboarding and re-confirm at least annually.

Last updated:

Sub-processorPurposeRegionData categories
NeonPrimary application database for customer account and audit data.United States (us-east-1)
  • Customer account data
  • Audit data
VercelApplication hosting and content delivery.Global edge / United States primary
  • Operational telemetry
Vercel BlobObject storage for customer uploads and generated reports.United States (us-east-1)
  • Customer-uploaded files
  • Generated reports
ResendTransactional email delivery.United States
  • Email recipient and delivery metadata
StripeSubscription billing and payment processing.United States
  • Billing contact and subscription metadata (no card data stored by AuditLink)
UpstashCaching and rate-limiting infrastructure.United States
  • Anonymized operational counters (no customer content)
SnykSoftware supply-chain security scanning.United States / EU
  • Application metadata only (no customer data)
GitHubSource-code repository and CI/CD.United States
  • Source code (no customer data)

Change notification

When we add or replace a sub-processor that has access to customer data, we update this page and email tenant administrators at least 30 days in advance, in line with our Data Processing Addendum. Customers may object to a new sub-processor by writing to support@auditlink.io.

Contact

Questions about our sub-processors or to request our DPA: support@auditlink.io.