Subprocessors

Last updated: 2026-05-23

Snap Launch LLC uses the following third-party subservice providers to deliver the Rollover Analysis Tool. All Customer Information is stored and processed in the United States.

Critical — Customer Information

Supabase, Inc.

Purpose: Database hosting, authentication, row-level security

Data processed: Customer Information (client names, analysis data — encrypted at application layer), advisor profiles, audit logs

Location: United States (AWS)

Certification: SOC 2 Type II

Stripe, Inc.

Purpose: Payment processing, subscriptions, invoicing

Data processed: Advisor billing info, transaction IDs, subscription metadata. No credit card numbers stored on our servers.

Location: United States

Certification: PCI DSS Level 1

Important — Infrastructure

Vercel, Inc.

Purpose: Application hosting, CDN, serverless functions

Data processed: HTTP request metadata, IP addresses. No Customer Information stored at rest on Vercel.

Location: United States / Global edge

Certification: SOC 2

Sentry (Functional Software, Inc.)

Purpose: Error monitoring and performance tracking

Data processed: Stack traces and request metadata. Sensitive fields redacted before transmission.

Location: United States

Certification: SOC 2

Resend, Inc.

Purpose: Transactional email delivery

Data processed: Email addresses and auth-related email content. No client analysis data in emails.

Location: United States

Certification: SOC 2

Supporting

OpenRouter

Purpose: AI-assisted features (where enabled)

Data processed: Prompt text submitted by user; no bulk Customer Information export

Location: United States

Certification:

Google LLC

Purpose: Google Analytics (optional)

Data processed: Anonymized usage analytics

Location: United States

Certification: SOC 2 / ISO 27001

Microsoft Corporation

Purpose: Microsoft Clarity (optional)

Data processed: Anonymized session analytics

Location: United States

Certification: SOC 2 / ISO 27001

GitHub, Inc.

Purpose: Source code repository and CI/CD

Data processed: Source code and deployment configs (no Customer Information in repo)

Location: United States

Certification: SOC 2 Type II

SOC 2 Compliance Consultant (Upwork)

Purpose: Policy drafting, audit preparation, compliance advisory

Data processed: Internal policy documents only. No access to production systems or Customer Information.

Location: Remote

Certification: NDA in place

Change Notifications

We update this page within 10 business days of any material change to our subprocessor list. Active customers are notified by email when a change materially affects data protection. To receive notifications, contact help@rolloveranalysistool.com.