Overview
This page lists all third-party sub-processors that Cove (operated by Версей ЕООД / Versey EOOD, UIC 208443341) uses to process personal data on behalf of our customers. This list is maintained in accordance with Article 28 of the GDPR and our Data Processing Agreement.
We will update this page when sub-processors are added or changed. If you are a customer with a Data Processing Agreement, you will receive at least 30 days' advance notice of any changes to this list.
Infrastructure and Hosting
| Sub-processor | Purpose | Entity Location | Data Processing Location | |---|---|---|---| | Supabase, Inc. | Database hosting, user authentication, and file storage | United States | US / EU (configurable) | | Vercel, Inc. | Application hosting, edge compute, and serverless functions | United States | US / EU (edge network) |
AI and Document Processing
| Sub-processor | Purpose | Entity Location | Data Processing Location | |---|---|---|---| | Anthropic, PBC | AI-powered document extraction, classification, and data analysis via Claude API | United States | United States |
Communications
| Sub-processor | Purpose | Entity Location | Data Processing Location | |---|---|---|---| | Resend, Inc. | Transactional email delivery (invoice emails, verification codes, reminders) | United States | United States |
Email Integrations
These sub-processors are engaged only when you choose to connect the corresponding email provider. They are not used unless you explicitly enable the integration.
| Sub-processor | Purpose | Entity Location | Data Processing Location | |---|---|---|---| | Google LLC | Gmail API for automated email document extraction | United States | United States | | Microsoft Corporation | Microsoft Graph API (Outlook) for automated email document extraction | United States | US / EU | | Zoho Corporation Pvt. Ltd. | Zoho Mail API for automated email document extraction | India | US / EU / India |
Other Services
| Sub-processor | Purpose | Entity Location | Data Processing Location | |---|---|---|---| | Translated srl (MyMemory) | Text translation services | Italy (EU) | EU | | VATStack | VAT rate lookup and validation | EU | EU |
Data Transfer Safeguards
For sub-processors located outside the European Economic Area, we rely on the following transfer mechanisms:
- EU-US Data Privacy Framework (DPF): Applicable to Google, Microsoft, and Vercel, which are certified under the DPF
- Standard Contractual Clauses (SCCs): Applicable to Supabase, Anthropic, Resend, and Zoho, in accordance with Commission Implementing Decision (EU) 2021/914
- Transfer Impact Assessments (TIAs): Conducted for all transfers to non-EEA jurisdictions to evaluate and ensure adequate protection
Changes to This List
Last updated: April 10, 2026
To receive notifications about changes to our sub-processor list, contact us at filip@joincove.io.
Contact
If you have questions about our sub-processors or data transfers:
- Email: filip@joincove.io