Current core subprocessors / service providers
This list identifies providers used in the current Hirentra service architecture. The exact processing scope can depend on the modules a customer uses.
- Supabase — primary application database, authentication and live object storage supporting Hirentra. Customer/project processing region is confirmed for the applicable deployment during onboarding/DPA scheduling.
- Google Cloud Storage — secondary evidence mirror for selected evidence files. Hirentra records source and destination SHA-256 values as part of evidence integrity verification. Stored objects are encrypted at rest by the provider.
- Cloudflare — DNS, HTTPS delivery, WAF and web security/network services for Hirentra domains and public web properties.
- Cloudflare R2 — independent disaster-recovery storage for database and application-storage backup copies, separate from the production Supabase environment. Backup objects are encrypted at rest by the provider.
- Resend — transactional service email delivery, such as account-related messages where configured.
- Stripe — subscription billing/payment services where a customer uses Hirentra's Stripe billing flow. Hirentra does not intentionally store full payment-card details in its application database.
Architecture summary
Live application data is held in Supabase. Evidence files are mirrored to Google Cloud Storage with SHA-256 integrity values recorded for verification. Whole-platform recovery copies are held separately in Cloudflare R2, with backup objects encrypted at rest and isolated from the production environment.
International processing
Provider corporate locations are not the same thing as a guaranteed data-residency commitment. Where a customer requires a specific hosting/data-residency position, it must be confirmed in the relevant order/DPA schedule. Where personal data is transferred internationally, appropriate lawful safeguards are required.
Changes
Hirentra may update this list when providers change. Material changes affecting Customer Personal Data will be handled in accordance with the applicable customer agreement/DPA.
Last updated: 20 September 2026.