Sub-processor List

Transparency about the third-party service providers who process your data

Last updated: November 30, 2024 | Version 1.0

Rolnia uses trusted third-party service providers to deliver our services. All sub-processors are contractually required to maintain data protection standards equivalent to GDPR and Singapore PDPA. This page lists all sub-processors currently in use.

Current Sub-processors

Service ProviderService TypeLocationStatus
Google (Gemini AI)AI ProcessingUSAActive
SupabaseDatabase & AuthenticationUSA (AWS)Active
VercelFrontend HostingUSA / Global Edge NetworkActive
RenderBackend HostingUSAActive
PolarPayment ProcessingUSAActive

Sub-processor Details

Google (Gemini AI)

Company Information

Legal Entity: Google LLC

Service Type

AI Processing

Data Processed

  • Profile content
  • Job descriptions
  • Generated content

Processing Locations

USA

Security Certifications

ISO 27001SOC 2 Type IIFedRAMP

Supabase

Company Information

Legal Entity: Supabase, Inc.

Service Type

Database & Authentication

Data Processed

  • All user data
  • Authentication data
  • Profile information

Processing Locations

USA (AWS)

Security Certifications

SOC 2 Type II

Vercel

Company Information

Legal Entity: Vercel Inc.

Service Type

Frontend Hosting

Data Processed

  • HTTP access logs
  • Edge function data
  • Session identifiers

Processing Locations

USA / Global Edge Network

Security Certifications

SOC 2 Type II

Render

Company Information

Legal Entity: Render Services, Inc.

Service Type

Backend Hosting

Data Processed

  • API request data
  • Server logs
  • User data in transit

Processing Locations

USA

Security Certifications

SOC 2 Type II

Polar

Company Information

Legal Entity: Polar Software Inc.

Service Type

Payment Processing

Data Processed

  • Billing information
  • Subscription status
  • Payment metadata

Processing Locations

USA

Security Certifications

PCI DSS (via Stripe)

Sub-processor Changes

Notification Process

We notify users of material changes to sub-processors with at least 14 days advance notice. If you have concerns about a new sub-processor or wish to object, please contact our Data Protection Officer.

Objection Process

If you object to the addition of a new sub-processor, you may:

  • Submit a written objection to our DPO within 14 days
  • Request termination of your account without penalty
  • Expect a response within 7 business days

Change History

DateChange TypeProviderDescription
Nov 30, 2024Initial ListAllInitial sub-processor list publication

Questions or Objections?

Data Protection Officer

Email: dpo@rolnia.com

Alternative: sales@rolnia.com (with "DPO Request" in subject line)

© 2026 New Indigo Solutions. All rights reserved. This Sub-processor List is incorporated by reference into our Data Processing Agreement.