Trust and Transparency
Authorized Sub-processors
Effective Date: May 15, 2026 — Last Updated: August 15, 2026
Overview
DEVUP AI utilizes a select number of infrastructure providers to deliver the Platform securely and reliably. We select providers that maintain published data protection commitments consistent with the requirements of Algerian Law 18-07 on the protection of personal data.
This page provides a transparent disclosure of the providers currently used to process data on behalf of DEVUP AI. For questions about our provider practices, contact us at support@devupai.com.
Authorized Sub-processor List
| Sub-processor | Purpose | Data Processed | Region |
|---|---|---|---|
| Hetzner | Application hosting | Technical data (IP address, request headers). No inference content. | Germany |
| Supabase | Database, authentication, session management | Account information, authentication data, billing records, API usage metadata, and user-uploaded content. | European Union (Ireland) |
| Cloudflare | DNS management | DNS query data only. No user data. | Global |
| Resend | Transactional email delivery | Email address and message content for account notifications. | European Union (Ireland) |
| SATIM | Payment processing (CIB / Eddahabia) | Billing and transaction data. | Algeria |
Data retention periods for each category are set out in our Privacy Policy.
Compute and Inference Providers
We use international infrastructure providers for compute and AI inference, located in the United States and the European Union. No identifying data is transmitted to these providers — your email address, IP address, and account identifier are never sent with inference requests. Only the content of your request is transmitted. These providers are bound by their own published terms of service, which prohibit training on customer data.
An up-to-date list of these providers is available on request at support@devupai.com.
Data Processing Safeguards
Data processing across our providers is governed by the following safeguards:
- Encryption: All data transmitted to and from providers is encrypted using TLS.
- No Training Use: Third-party inference providers are bound by their own published terms of service, which prohibit training on customer data.
- Compliance:Sub-processor selection and management is conducted in accordance with the international data transfer requirements of Articles 44–45 of Algerian Law 18-07.
Changes to This List
DEVUP AI reserves the right to update this sub-processor list as infrastructure needs evolve. Material changes (such as adding a new category of sub-processor or changing the data center region for persistent data) will be reflected on this page with an updated "Last Updated" date. We encourage users to review this page periodically.
Contact
For questions regarding our sub-processor practices, please contact:
- Email: support@devupai.com
For related legal documents, see our Terms of Service and Privacy Policy.