This document is in draft. It has been prepared ahead of independent legal review and is published so you can see exactly what we intend to commit to. It takes effect on 14 September 2026. If anything here matters to a decision you are making, ask us and we will confirm it in writing.
Sub-processors — Grace
- Provider: Egan, Michael (ABN 37 317 577 102), trading as Strategic Worlds
- Effective date: 14 September 2026
- Last updated: 31 August 2026
- Contact: support.grace@strategicworlds.com.au
To provide Grace we use a small number of trusted service providers ("sub-processors") that may process personal information contained in Customer Data on our behalf. We impose data-protection obligations on each of them consistent with our Data Processing Addendum.
| Sub-processor | Service provided | Data processed | Primary location |
|---|---|---|---|
| Clerk, Inc. | User authentication and identity management | Account identity, credentials, sign-in metadata | United States |
| Neon, Inc. | Application database (PostgreSQL) | All application data, including Customer Data | Australia — Sydney (ap-southeast-2) |
| Vercel Inc. | Application hosting, edge/serverless compute, and file storage (Blob) | Application traffic, logs, uploaded files/attachments | Australia — Sydney (syd1) for compute and for file storage (Blob). Confirmed in the Vercel console on 2026-09-04 and re-confirmed 2026-09-09; the Blob stores serving Production and Preview are separate stores and both are in syd1 |
| Transactional email provider — Resend (United States) or SMTP2GO (Sydney), whichever this deployment is configured for | Optional — the weekly reminder digest (only when a workspace enables it) | Recipient name + email address, and the titles and due dates of the records they own | See the provider in use. A workspace may require Australian processing, in which case no reminder is sent through an offshore provider. Not used at all by a workspace that routes email through its own mail server — see the note below. |
| Anthropic, PBC | Optional — the "Ask Grace" AI assistant (only when a workspace enables it) | Prompts + the records a user asks about (may contain personal information) | United States |
Notes:
- Data residency. The primary application database and file storage are hosted in Australia. Authentication (Clerk) is processed in the United States. When a workspace enables the optional AI assistant, the prompts and records it processes are sent to Anthropic in the United States — see the overseas-disclosure sections of the Privacy Policy and DPA.
- Email is cross-border at DELIVERY, whichever provider sends it. Choosing an Australian sending provider narrows the disclosure — Grace's own processor stops being overseas — but a message addressed to a mailbox hosted outside Australia (a Gmail account, or a Microsoft 365 tenancy in another region) reaches that country regardless of who put it on the wire. Grace neither knows nor controls where a recipient's mailbox is hosted. We state this rather than implying a guarantee we cannot make.
- Optional reminder emails. Reminders are off by default and are used only if a workspace enables them. A workspace may additionally require Australian processing, in which case Grace sends nothing through a provider that processes overseas, rather than making a disclosure the workspace declined.
- A workspace's own mail server removes the email sub-processor entirely. A workspace may configure its own SMTP server (Workspace settings → Weekly reminders), in which case Grace connects directly to that server and no transactional email provider processes that workspace's reminders at all. Where those messages are then handled is the customer's own arrangement with whoever operates that server; Grace neither selects it nor can certify its location, and says so on the setting itself rather than implying an assurance. The password for that server is stored encrypted (AES-256-GCM) and is never displayed back, logged, or included in a workspace export.
- Optional AI features (Anthropic). The AI assistant is off by default and is used only if a workspace enables it. When enabled, the prompts submitted to the assistant and the records it is asked about are processed by Anthropic under its Commercial Terms and Data Processing Addendum; Anthropic does not use the data to train its models and (under its API terms) deletes it within approximately 30 days.
- What the Australian-processing setting does and does not do. Choosing an Australian sending provider means Grace's own email processor is in Australia. It does not mean no American company is in the chain: SMTP2GO's vendor page states it runs on Google Cloud and AWS, so American-controlled infrastructure remains involved even on its Sydney plan. We say so rather than let the setting imply more than it delivers.
- We use no analytics, error-monitoring or payment provider. Grace runs no third-party analytics or session-recording of any kind. If a payment provider is added when charging begins, it will appear in the table above before it processes anything.
- Changes. We keep this list current. Material changes to sub-processors are notified as set out in the DPA. The live version will be published at grace.strategicworlds.com.au/sub-processors.