AIDEALT EUDR BRIDGE

Subprocessors

Last updated: 2 September 2026

Standard B2B service terms for the current AIDEALT EUDR Bridge. A customer-specific order form or executed agreement may supplement or override these pages where expressly stated.

AIDEALT uses the following service providers to operate EUDR Bridge, CarbonProof and their public product pages. Provider terms, processing locations and transfer safeguards may change as those vendors update their services; material changes affecting customer-data processing will be reflected here or communicated through the agreed customer channel.

Current service providers

Supabase — database, authentication and private object storage for customer workspaces and supplier evidence; configured for an EU-region deployment.
Render — application hosting and server-side processing; the production service is configured in the Frankfurt region.
Cloudflare — hosting, HTTPS delivery and protection of the public product pages on evidence.aidealt.global. These pages do not receive customer evidence files or account credentials. Cloudflare may process technical request data needed to serve and protect the pages.
n8n-based email workflow and configured SMTP service — primary transactional routing and delivery for account confirmation, supplier requests, reminders and operational notifications.
Resend — transactional email fallback when configured. It does not receive supplier evidence files or farm geolocation documents.
Stripe — subscription checkout, billing administration and payment-related records. Supplier evidence files and farm geolocation documents are not sent to Stripe.

Data minimisation

Coordinates, farm evidence and uploaded customer documents are not sent to general-purpose AI providers by the current product. Any future feature that sends customer evidence to an additional processor requires an explicit product, privacy and DPA review before activation.

Questions and objections

Customers may contact contact@aidealt.global for processing details relevant to their account or to raise a reasonable data-protection objection to a material subprocessor change under the applicable DPA.