Legal
Sub-processors
Effective: 21 July 2026 · Version 1.0
These are the service providers ICPLeads, Inc. uses to operate InspectAnywhere. Each is engaged under a written contract that requires them to process personal information only on our instructions and to maintain appropriate security.
1. Current sub-processors
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase, Inc. (via Lovable Cloud) | Application database, authentication, and file storage. | US / EU (region-dependent) | SCCs / UK IDTA where applicable |
| Cloudflare, Inc. | Hosting, content delivery, DDoS protection, edge runtime. | Global edge network | SCCs / UK IDTA / DPF |
| Resend, Inc. | Sending transactional and notification emails. | United States | SCCs / UK IDTA |
2. Field agents (independent contractors)
Verification visits are performed by vetted local field agents engaged as independent contractors under confidentiality and data-handling obligations. Agents receive only the information necessary to complete the specific visit you requested and are not listed individually here because the recipient depends on the visit location.
3. International transfers
Some sub-processors are located outside the EEA, UK, or Switzerland. Where personal information of residents of those regions is transferred internationally, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where applicable, the EU-US, UK Extension, and Swiss-US Data Privacy Framework certifications of the receiving party. See our Privacy Policy for the full transfer-safeguards section.
4. Changes and notifications
We will update this list when we add, remove, or replace a sub-processor. To be notified in advance of changes, email dpo@inspectanywhere.com to subscribe to sub-processor change notices.