Authorized Sub-processors

Last Updated: October 8, 2026

To support the delivery of the Rovekey platform and services, Rovekey Limited engages third-party service providers ("Sub-processors"). This page provides transparency into the identities, roles, and processing locations of these Sub-processors in accordance with our Data Processing Agreement (DPA).


Updates and Notifications

As our business and technical infrastructure evolves, the Sub-processors we utilize may change. We will notify Organization Admins via email or an in-app platform notification at least thirty (30) days prior to authorizing any new Sub-processor to process Customer Data.

Current Sub-processors

Sub-processorEntity LocationService ProvidedProcessing Location
Supabase, Inc.United StatesDatabase hosting (PostgreSQL), authentication, and blob storage.Singapore
Vercel Inc.United StatesEdge compute, API routing, and frontend application hosting.Hong Kong
Resend, Inc.United StatesTransactional email delivery (e.g., user invitations, system alerts).United States
DeepseekChinaLLM and image to text APIChina
MinimaxSingaporeVoice, image and LLM to text APIUnited States
Stripe, Inc.United StatesPayment processing and subscription invoicing.Global

Infrastructure Security

All Sub-processors undergo a security and privacy review prior to engagement to ensure they provide a level of data protection comparable to the requirements of the Hong Kong PDPO, the Singapore PDPA, and global industry standards. We execute Data Processing Agreements with all Sub-processors, incorporating standard contractual clauses where applicable for cross-border data transfers.

Right to Object

If you are an active Customer and have a reasonable, data-protection-related objection to the engagement of a new Sub-processor, you must notify us in writing within thirty (30) days of receiving the update notice.

Contact

Please direct objections or inquiries regarding our Sub-processors to our Data Protection Officer at:

Email: hello@rovekey.com