SESecureEdge AdvisoryBeta
ProductsServicesAssessmentsSectorsPricingInsightsAboutContact
Customer loginRequest portal access

Sub-processors

The third parties that process personal data on our behalf, what they see, and where that data physically rests.

4 sub-processors2 regions, none in the UAE

How to read this page

SecureEdge Advisory uses the providers below to run the website and the customer portal. They process personal data on our behalf, under contract, and only on our instructions.

None of them operates a region inside the UAE. Personal data therefore rests outside the State, in Frankfurt, Germany (eu-central-1) and the United States, which is a cross-border transfer. We state its lawful basis below rather than leave you to assume one. See also our Privacy Policy and our Data Processing Terms.

Vercel

Vercel Inc.

Hosting and content delivery for the website and the customer portal. Processes the request metadata necessary to serve the application.

Data it may process
  • IP address, and approximate location derived from it
  • Browser user-agent and request metadata
  • Application logs
Where it rests
Frankfurt, Germany (eu-central-1)
Basis for transfer
Contractual safeguards under Article 23 of the UAE PDPL. A data processing agreement with the provider obliges it to protect the data to the standard the PDPL requires. We do not rely on an adequacy decision, having verified none as covering this destination.
Website
https://vercel.com

Supabase

Supabase Inc.

Managed PostgreSQL database and authentication for the customer portal. Stores customer account and engagement records.

Data it may process
  • Name and business contact details
  • Account credentials (hashed)
  • Company profile submitted by the customer
  • Consent and agreement records
Where it rests
Frankfurt, Germany (eu-central-1)
Basis for transfer
Contractual safeguards under Article 23 of the UAE PDPL. A data processing agreement with the provider obliges it to protect the data to the standard the PDPL requires. We do not rely on an adequacy decision, having verified none as covering this destination.
Website
https://supabase.com

Zoho

Zoho Corporation

Business email for the mailboxes published on this website. Processes correspondence sent to us, and carries the activation credentials issued to a new customer.

Data it may process
  • Name and business contact details
  • The contents of any message you send us
  • Account activation credentials issued to a new customer
Where it rests
the United States
Basis for transfer
Contractual safeguards under Article 23 of the UAE PDPL. A data processing agreement with the provider obliges it to protect the data to the standard the PDPL requires. We do not rely on an adequacy decision, having verified none as covering this destination.
Website
https://www.zoho.com

Resend

Resend, Inc.

Transactional email delivery. Sends notes submitted through the website contact drawer to our own mailbox, and carries account email such as activation and password reset.

Data it may process
  • Name and email address of the person writing to us
  • Organisation name, where the sender provides one
  • The contents of the message they chose to send
  • Delivery metadata, including timestamps and delivery status
Where it rests
the United States
Basis for transfer
Contractual safeguards under Article 23 of the UAE PDPL. A data processing agreement with the provider obliges it to protect the data to the standard the PDPL requires. We do not rely on an adequacy decision, having verified none as covering this destination.
Website
https://resend.com
On this page
  1. Vercel
  2. Supabase
  3. Zoho
  4. Resend
Where your data rests
  • Frankfurt, Germany (eu-central-1)
  • the United States

All outside the UAE, so a cross-border transfer, disclosed here with its lawful basis under Article 23 of the PDPL.

The rest of the pack
  • Privacy Policy
  • Terms of Service
  • Data Processing and Assessment Terms
  • Acceptable Use Policy
  • Cookie Policy
  • Security and trust
When you are ready

Read it, then let us look at your organisation and tell you what we find.

Create your company profile →
SESecureEdge Advisory

Your CIO & CISO, everywhere. Cyber advisory and a connected GRC product family for the UAE & GCC.

Not open yet. Before we collect a single address we will name the provider that sends it on our sub-processors page, and say in the privacy policy what we use it for.

Products
EvidenceEdgeControlRegistryCertEdgeTrustEdgeImpactEdgeRiskEdgeAssessEdgeChangeEdgeAppEdgeOneAudit
Solutions
vCIO, IT leadershipvCISO, securityAssessmentsToolsBy sectorFrameworks (15)
Company
About usServicesPricingContact
Resources
InsightsFrequently asked questionsCompliance deadlinesFrameworks we coverAEGIS, the enginePlatform securityResponsible disclosure
Legal & Trust
Privacy PolicyTerms of ServiceData Processing (DPA)Acceptable UseCookie PolicySub-processorsSecurity & trustPlatform security
© 2026 SecureEdge Advisory. All rights reserved.
Registered in Dubai, United Arab Emirates · cio@secureedgeadvisory.com
PrivacyCookiesTermsDPA