Legal

Sub-processors

Last updated: 27 June 2026

The following sub-processors support the React-IMS service. We give at least 30 days' notice of any intended additions or replacements; account administrators can subscribe to change notifications by emailing privacy@react-ims.com.

Current sub-processors

ProviderPurposeLocationTransfer safeguard
Lovable Cloud (Supabase)Hosting, database, authentication, file storageEuropean UnionIntra-EEA processing; encryption at rest and in transit
CloudflareEdge delivery, DDoS protectionGlobal edge networkUK IDTA / EU SCCs where applicable
Lovable AI GatewayAI inference for guidance, generation and analysis featuresEuropean Union and United StatesUK IDTA / EU SCCs; no model training on Customer Data
Stripe Payments Europe LtdBilling, invoicing, VAT handlingIrelandIntra-EEA processing

Notification of changes

We notify customers in advance of new sub-processors via in-product announcement and email. Customers may object on reasonable data-protection grounds during the notice period.