Subprocessors - modus marine
| Subprocessor | Purpose | Data processed | Location | Safeguards |
|---|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage | Account email + hashed password, all vessel/equipment/service/project/task/trip/calendar/document records, uploaded files | US East | Encryption at rest + in transit; Row-Level Security in Postgres; DPA + SCCs (to be accepted before public launch) |
| Vercel Inc. | Application hosting, edge / serverless compute | Request metadata, IP addresses, the PDFs rendered at request time (the weekly review report, a trip's log, a passage plan and a service plan; the trip log and passage plan carry crew names and positions) | US (primary) + global edge | Encryption in transit; DPA + SCCs per Vercel's standard terms |
| Anthropic PBC | Reading a photo or PDF you upload and returning it as text - only when you use that feature | The image or PDF you submit, and the instruction sent with it | US | Encryption in transit; not retained on our behalf; API content is not used to train their models |
| Resend (Plus Five Five, Inc.) | Delivering the app's account emails: the link that confirms a new account or a changed email address, or resets a password | The address the email is sent to, and the email itself (a one-time link) | US East | Encryption in transit; DPA per Resend's standard terms |
Not subprocessors
The following are not subprocessors because they do not receive personal data:
- Google Fonts / next/font - fonts are self-hosted from our own origin
(
next/fontbundles them at build time). No request goes to Google at runtime. - Analytics / advertising - we run none.
- Victron Energy (VRM) - if you choose to connect your boat's Victron system from the Metrics page, our server reads your boat's own battery, solar and generator figures from Victron's VRM service using the access token you provide. Data flows from Victron to us on your instruction; we send Victron nothing about you, and the token is stored where only our server can read it. Your VRM account is governed by Victron's own terms. Nothing is connected unless you connect it.
How to be notified of changes
We will tell you at least 30 days before a new provider is added, in the app or by email. While modus marine is in private testing, you can also just reply to whoever gave you access - see the Privacy Policy, §1.