Legal
Sub-processors.
Third-party services we use to operate Reality Twin, with purpose and region.
Reality Twin uses a small number of third-party service providers ("sub-processors") to operate the platform. This page lists them, what they do and where they run. It complements our Data Processing Addendum and Privacy notice.
Cross-border transfers (in particular for AI model inference) rely on the European Commission's Standard Contractual Clauses and the Swiss FADP addendum, with technical measures including TLS 1.3 in transit and AES-256 at rest.
| Sub-processor | Purpose | Region |
|---|---|---|
| Lovable (Hosting & AI Gateway) | Application hosting, edge runtime and Lovable AI Gateway used to route model inference requests. | EU (application) · Global (AI Gateway may forward to non-EU providers, incl. US) |
| Supabase | Primary application database, authentication and storage. | EU (Dublin, Ireland) |
| Stripe | Subscription billing and payment processing. | EU / US (SCCs) |
| Cloudflare | CDN, DNS, DDoS protection and edge caching. | Global edge |
| Resend | Transactional email delivery (account, billing and product notifications). | EU |
Changes
We provide at least 30 days' notice before adding or replacing a sub-processor. To be notified of changes, email hello@realitytwin.io.