Legal
Sub-processors
Last updated: 29 April 2026
TruVis Technologies LLC uses the sub-processors below to deliver the service. We give customers at least 30 days' notice of any new sub-processor; the most current list is always on this page. This disclosure is made in accordance with UAE Federal Decree-Law No. 45 of 2021 (UAE PDPL) and the EU General Data Protection Regulation (GDPR).
Sub-processors marked optional are engaged only when the corresponding feature is enabled by the customer or required by their tier.
Current sub-processors
| Provider | Purpose | Primary location |
|---|---|---|
| Supabase, Inc. | Postgres database, authentication, file storage and edge functions hosting customer-tenant data. | Bahrain (region me1) |
| Vercel Inc. | Application hosting (Next.js App Router) and CDN. | Bahrain (region me1) |
| Resend Inc. | Transactional email delivery for RAI, decisions and lead notifications. | United States (with regional delivery edges) |
| ComplyAdvantageOptional | Sanctions and PEP screening data and webhook delivery. | United Kingdom |
| SumsubOptional | Identity verification (liveness, OCR, face match). | European Union |
How to be notified of changes
Active customers receive at least 30 days' notice by email before a new sub-processor is added. To object, reply to that email within the notice period.
Contact
Questions about sub-processors: privacy@truvis.ae.
Notice. This page is provided for transparency and is not legal advice. Final binding terms are those signed by your authorised representative on a TruVis customer agreement. Contact legal@truvis.ae for the executable form.