Sub-Processors - LegalPrizm

VUGA Enterprises LLC d/b/a LegalPrizm ("LegalPrizm," "we," "us," or "our") engages third-party sub-processors to assist in providing our Service, including our website, mobile applications, and related services (collectively, the "Service"). This document lists the sub-processors that may process personal data on our behalf, as referenced in our Privacy Policy and Data Processing Agreement.

1. Sub-Processors

The following sub-processors are engaged by LegalPrizm:

Sub-Processor	Purpose	Data Processed	Jurisdiction	Compliance
Amazon Web Services, Inc.	Cloud hosting and storage	Encrypted user data, logs, documents	USA / EU (Frankfurt)	ISO 27001, SOC 2, GDPR DPA
MongoDB Atlas (MongoDB, Inc.)	Database hosting	Encrypted case data, client information, documents	USA / EU (Frankfurt)	ISO 27001, SOC 2, GDPR DPA
Cloudflare, Inc.	CDN and DDoS protection	IP addresses, traffic data	Global (EU data residency available)	ISO 27001, SOC 2, GDPR DPA
Stripe, Inc.	Payment processing	Billing information, transaction data	USA / EU (Dublin)	PCI DSS Level 1, GDPR DPA
SendGrid (Twilio Inc.)	Email delivery	Email address, communication content	USA / EU (with SCCs)	ISO 27001, SOC 2, GDPR DPA
Datadog, Inc.	Error tracking and monitoring	Usage data, error logs (pseudonymized)	USA / EU (Frankfurt)	SOC 2, GDPR DPA
Intercom, Inc.	Customer support	Support tickets, user communications	USA / EU (with SCCs)	SOC 2, GDPR DPA
Clerk, Inc.	Authentication services	User credentials, session data	USA / EU (with SCCs)	SOC 2, GDPR DPA

2. EU Data Processing

For EU data subjects, we ensure that all sub-processors either:

Process data within the European Economic Area (EEA), or
Have executed Standard Contractual Clauses (SCCs) approved by the European Commission, or
Are covered by an adequacy decision from the European Commission

Primary data processing for EU customers occurs in our Frankfurt (Germany) data center.

3. Updates to Sub-Processors

We may update this list to reflect changes in our sub-processors. We will notify you of new sub-processors at least 14 days in advance via email or in-Service announcement.

You may object to a new sub-processor within 7 days by emailing [email protected]. If an objection cannot be resolved, you may terminate your account as per the Terms of Service.

4. Compliance

All sub-processors are bound by data protection agreements that meet the requirements of Applicable Data Protection Laws, including GDPR and UK GDPR. We conduct due diligence to ensure their security and compliance standards align with ours.

Our sub-processor requirements include:

Written agreements imposing data protection obligations equivalent to our Data Processing Agreement
Appropriate technical and organizational security measures (GDPR Article 32)
Sufficient guarantees of compliance with Data Protection Laws
Audit rights for LegalPrizm and, where applicable, our customers
Immediate notification of any data breaches or security incidents
Data deletion or return upon termination of services

5. Sub-Processor Categories

Infrastructure Providers

These providers host our infrastructure and store encrypted data:

Amazon Web Services (AWS) - Primary cloud infrastructure
MongoDB Atlas - Database services
Cloudflare - Content delivery and security

Business Services

These providers support our business operations:

Stripe - Payment processing (PCI DSS compliant)
SendGrid - Transactional email delivery
Intercom - Customer support and communications

Security and Monitoring

These providers help us maintain security and service reliability:

Datadog - Application monitoring and error tracking
Clerk - Authentication and identity management

6. Contact Us

For questions about our sub-processors, contact:

VUGA Enterprises LLC d/b/a LegalPrizm
Address: 18117 Biscayne Blvd Unit 1039, Aventura, FL 33160, United States
Email: [email protected]
Phone: 786-967-6544

Sub-Processors List