This page lists every third-party sub-processor BrioMon Technologies LLC ("BrioMon", "we", "us") engages to help deliver the Services, consistent with our Data Processing Agreement (DPA) obligations under GDPR Article 28. It should be read together with our Privacy Policy and Cookie Policy.
What This Page Covers
A "sub-processor" is any third party BrioMon engages to process personal data on our behalf while delivering the Services -- for example, hosting our application, storing our database, or handling a payment. This page is the authoritative, current list. It does not cover services that only ever see BrioMon's own operational data (accounting software, internal tools) rather than personal data belonging to our users.
Current Sub-Processors
| Supabase, Inc. | Purpose: Database, authentication, and application backend infrastructure. Data: Account credentials, session data, and all User Data stored by the platform. Location: USA. Safeguards: Encrypted at rest (AES-256) and in transit (TLS 1.3). |
| Vercel Inc. | Purpose: Hosts and serves the BrioMon web application. Data: Request metadata. Location: USA (global edge network). |
| Cloudflare, Inc. | Purpose: CDN, DNS, DDoS protection, and edge routing; Cloudflare Stream delivers MCMP course videos, exam media, and MCMD/Sanctuary guided-practice videos. Data: Request metadata; signed, time-limited video-playback tokens. Location: USA (global edge network). |
| Resend | Purpose: Transactional and account email delivery -- verification links, password resets, billing/invoice notifications. Data: Name, email address. Location: USA. |
| 2Checkout / 2Monetize (Verifone) | Purpose: Merchant of Record for individual subscriptions and one-time MCMP purchases. Data: Billing name/address, payment confirmation records. BrioMon never processes, stores, or sees full card details. Location: Global (Merchant of Record). |
| Paddle | Purpose: Merchant of Record for corporate annual invoicing. Data: Billing name/address, payment confirmation records. BrioMon never processes, stores, or sees full card details. Location: Global (Merchant of Record). |
Emergency crisis routing
In acute safety scenarios, BrioMon's platform automatically links users directly to external, third-party national crisis lines (e.g., the 988 Lifeline). This is a routing link, not a data-sharing relationship -- no internal user profile or journal text is transmitted to crisis providers, so they are not listed as a sub-processor above.
Change Notification
BrioMon will provide at least 14 days' advance notice on this page before adding any new sub-processor. Corporate Clients under a signed Data Processing Agreement may object to a new sub-processor on reasonable data-protection grounds within 7 days of notice; if the parties cannot resolve the objection, either party may terminate the affected Services on 30 days' written notice, per the terms of the DPA.
BrioMon imposes data-protection obligations on each sub-processor that are at least equivalent to those in our own Data Processing Agreement, and remains fully responsible to our clients for each sub-processor's performance of those obligations.
International Transfers
All sub-processors listed above are based in or operate infrastructure in the United States. Where personal data of EU, UK, or Swiss data subjects is transferred to these sub-processors, BrioMon ensures appropriate safeguards are in place -- see Privacy Policy, Section 8 (International Data Transfers) for the specific transfer mechanisms (Standard Contractual Clauses and the UK International Data Transfer Addendum) that apply.
Contact
Contact BrioMon
BrioMon Technologies LLC
1603 Capitol Avenue, Suite 413
Cheyenne, WY 82001, USA
Data Protection Inquiries: privacy@briomon.com
General Communications: connect@briomon.com
Website: briomon.com
Corporate clients may request our full Data Processing Agreement, including the complete sub-processor terms, by emailing privacy@briomon.com.