Trust & Legal

Subprocessors

Last updated: 11 May 2026

MaidCopilot, operated by Coreframes Lab, uses a limited number of third-party subprocessors to deliver its services. A subprocessor is any third party that processes personal data on our behalf and under our instruction.

This page lists all subprocessors currently engaged by MaidCopilot, the purpose for which they are engaged, their entity country, and where your data is hosted. We review our subprocessors regularly and update this list when changes occur.

Objection window. If you have entered into a Data Processing Agreement (DPA) with Coreframes Lab, we will notify you by email at least 14 days before adding or replacing a subprocessor. You may object to the change in writing within that window by contacting admin@coreframeslab.com. If we cannot accommodate the objection, you may terminate your subscription in accordance with the DPA.
Current subprocessors
SubprocessorPurposeEntity countryData location
Supabase, Inc.supabase.comDatabase, file storage, and authenticationAll customer data at rest — employer records, maid biodata, documents, conversation logs, and user accounts are stored in Supabase's managed Postgres and object storage.United StatesAWS ap-southeast-1 (Singapore)
Amazon Web Services, Inc.aws.amazon.comCloud infrastructureUnderlying infrastructure provider for Supabase. All data is hosted in the ap-southeast-1 (Singapore) region.United StatesSingapore (ap-southeast-1)
Railway Corp.railway.appBackend application hostingHosts the MaidCopilot backend API and webhook processing services. Deployed in the Singapore region.United StatesSingapore
Vercel, Inc.vercel.comFrontend hosting and CDNServes the MaidCopilot web application. Static assets are distributed via Vercel's global CDN. No personal data is stored at edge nodes.United StatesGlobal CDN (no personal data stored)
Meta Platforms, Inc.www.whatsapp.com/business/apiWhatsApp messaging deliveryProcesses inbound and outbound WhatsApp messages through the WhatsApp Business Platform (Cloud API). Message content is transmitted through Meta's infrastructure for delivery.United StatesMeta global infrastructure
Changes to this list

Coreframes Lab reserves the right to add, remove, or replace subprocessors at any time, subject to the notice period described above for customers under a DPA. We will always maintain the current authorised subprocessor list on this page.

If you would like to be notified automatically when this list changes, please contact admin@coreframeslab.com to be added to our subprocessor change notification list.

Questions

For questions about our subprocessors or data processing practices, contact our Data Protection Officer:

admin@coreframeslab.com

Related: Data Processing Agreement · PDPA Policy · Privacy Policy · Security

Chat on WhatsApp