Plio Subprocessor and Third-Party Service Provider List
This notice identifies providers that may process information when Paylists LTD operates Plio. A provider is a subprocessor only when it processes Customer Personal Data on Paylists' behalf; other vendors may be independent controllers or service providers for Paylists' own operations.
1. Providers
| Provider | Service and relevant data |
|---|---|
| Supabase | Managed PostgreSQL, authentication, storage and related backend functions; account and R&D project data |
| Amazon Web Services (AWS) | Infrastructure underlying Supabase and relevant storage or logging, where applicable |
| Vercel | Next.js application deployment, edge/runtime processing, service logs and request metadata |
| OpenAI API Platform | Lister AI: technical R&D project records, prompts, uploaded text, generated results and potentially personal information within those records |
| Twilio | Business communications, verification or notifications |
2. AI processing disclosures
Lister may transmit information needed for the requested analysis to its AI provider. This can include free-text descriptions, uploaded technical documents, names appearing in those documents, recorded professional roles and qualifications, project activities and cost evidence. Customers should minimise unnecessary personal data.
3. Processing regions and legal safeguards
Plio's documented primary database region is Frankfurt, Germany. Actual application processing, support access, communication provider processing and AI processing may take place elsewhere depending on configuration. Relevant international transfers will be assessed and appropriate legal safeguards applied where required, as described in the Privacy Policy and DPA.
4. Changes
We will update this page when providers, purposes, data categories or processing locations materially change. For processing governed by the DPA, we will provide subprocessor-change notice and objection rights as required by the DPA and applicable law.
Contact: privacy@plio.co.uk.