Subprocessors

Hosts the AGICOMPLY marketing site and application, including server-side routes used for inquiry handling and application workflows. Provider terms and infrastructure practices are governed by Vercel’s published documentation and the applicable account agreement.

Provides account authentication, organization-scoped application data services, PostgreSQL persistence, and private object storage used by the AGICOMPLY application. Access controls and tenant segregation are implemented through application controls and PostgreSQL row-level security.

Receives extracted text segments for embedding generation only when external embeddings are enabled for the applicable organization. Original uploaded files are not sent through this embedding workflow. Organizations should redact sensitive source content before upload when required.

Supports request-rate controls for selected application endpoints when the production Redis configuration is enabled. Request identifiers and rate-limit state may be processed for this purpose.

Processes payment and invoice details for the ATO Readiness Baseline, AI Evidence Gap Assessment, and Agency Assessment Program. AGICOMPLY does not directly store complete payment-card or bank-account credentials submitted through Stripe-hosted interfaces.

Used when Baseline Fit or other transactional email delivery is configured. Governed Evidence Gap Assessment and Agency Program request payloads are not forwarded through Resend. Evidence files should not be submitted through any public form.