Sub-Processors | Delegance Brokerage

Delegance Insurance uses the following sub-processors to provide its services. Each sub-processor is contractually bound to protect customer data in accordance with our Privacy Policy. This list is updated when sub-processors are added or removed.

Last updated: February 16, 2026

Infrastructure & Hosting

Sub-Processor	Purpose	Data Location	Data Processed
Amazon Web Services (AWS)	Application hosting (ECS Fargate), document storage (S3), OCR processing (Textract, Lambda), logging (CloudWatch)	US East (Virginia)	All application data, insurance documents, certificates, application logs
Supabase Inc.	Managed PostgreSQL database, authentication, row-level security	US East (Virginia, AWS-backed)	User accounts, company profiles, insurance policies, Slack installation tokens (encrypted), identity mappings
Weaviate B.V.	Cloud vector database for semantic search, conversation history, and AI memory	US East (South Carolina, GCP)	Document embeddings, conversation messages, knowledge graph nodes, assessment responses

AI & Machine Learning

Sub-Processor	Purpose	Data Location	Data Processed
OpenAI, Inc.	Large language models (GPT-5.2, GPT-4o-mini) for natural language understanding and response generation	United States	User queries and minimal insurance context needed to generate responses. Zero data retention per OpenAI API policy.
Voyage AI, Inc.	Text embedding generation (voyage-law-2) for semantic document search	United States	Document text chunks and user queries for embedding. No data retained after processing.

Communications

Sub-Processor	Purpose	Data Location	Data Processed
Resend, Inc.	Transactional email delivery (COI delivery, notifications, password resets)	United States	Recipient email addresses and email content

Data Protection

All sub-processors are contractually required to maintain appropriate security measures.
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256) across all sub-processors.
Multi-tenant isolation ensures each company's data is strictly separated at the database level.
OpenAI and Voyage AI do not retain customer data beyond the API request lifecycle.
Slack bot tokens are encrypted with AES-256-CBC before storage in Supabase.

For questions about our sub-processors or data handling, contact [email protected].

Delegance Brokerage reserves the right to update this list as sub-processors change. Material changes will be communicated to affected customers.