Subprocessors
Last updated: 8 July 2026
InsureCompare uses service providers to host, secure, operate, and improve the service. These providers may process personal data only where needed for the purposes described below and in our Privacy Policy.
We review providers based on operational need, security posture, contractual protections, and whether the provider is appropriate for the data category being processed.
Current Service Providers
Provider
Supabase
Purpose
Authentication, database, storage, and account sessions.
Data Categories
Account data, saved records, product-request files, usage records, and application data stored in the service.
Processing Location
May process or store data outside Malaysia depending on the configured project region and Supabase infrastructure.
Provider
Purpose
OAuth login, Gemini AI processing, and email services.
Data Categories
Login identifiers, AI prompts and context sent for generation, generated responses, and support or operational email content.
Processing Location
May process data in Google infrastructure regions outside Malaysia.
Provider
Cloudflare
Purpose
Turnstile anti-abuse checks and related security protections.
Data Categories
Anti-abuse signals, device/browser signals, and request metadata needed to verify legitimate use.
Processing Location
May process data through Cloudflare's global security network.
Provider
Curlec or Razorpay
Purpose
Subscription checkout, payment processing, and payment event reconciliation.
Data Categories
Payment identifiers, checkout references, subscription metadata, payment event payloads, and related billing records.
Processing Location
May process data in Malaysia or other countries according to the payment provider's infrastructure and policies.
Provider
Render
Purpose
Application hosting and runtime infrastructure.
Data Categories
Application traffic, operational logs, service metadata, and data processed while using InsureCompare.
Processing Location
May process data in hosting regions outside Malaysia depending on deployment configuration.
Provider
Logging, support, and security providers
Purpose
Service monitoring, support handling, diagnostics, security investigation, and incident response.
Data Categories
Operational logs, support messages, error details, security signals, and request metadata.
Processing Location
May vary by provider and service configuration.
Cross-Border Processing
Some providers may process or store data outside Malaysia. Where cross-border processing is involved, we take reasonable steps to use providers with appropriate technical, organizational, and contractual safeguards.
Changes
We may update this page when we add, remove, or materially change a provider that processes personal data for InsureCompare.