Subprocessor List

ChemCal Pro Subprocessor List

Effective date: July 16, 2026

Last updated: July 17, 2026

Document ID: CCP-LEGAL-SUB-001

Version: 1.0

This list identifies the third parties ChemCal Pro LLC currently engages to Process Customer Personal Data on behalf of Customer organizations. It does not include a provider merely because ChemCal Pro may evaluate, plan, or optionally use that provider in the future.

1. Current Subprocessors

Supabase Pte. Ltd.

Processing purpose: Hosted PostgreSQL database, authentication, private object storage, backend services, backup, and infrastructure security/logging

Categories of information: Account identifiers; names and emails; authentication and session identifiers; organization and membership data; Customer Content; Label/SDS, file, product, calculator, verification, audit, and technical data

Primary processing location: Customer-selected United States project region; limited support and Subprocessor access may occur elsewhere under provider terms

Transfer mechanism where required: Supabase DPA; EU Standard Contractual Clauses Modules 2/3 and applicable UK transfer terms

Vercel Inc.

Processing purpose: Application hosting, deployment, content delivery, server-side execution, request handling, and infrastructure/security logging

Categories of information: Requests and responses passing through the application; account and service data in transit; IP address; user agent; request, error, deployment, and security metadata

Primary processing location: United States primary compute configuration; global delivery and support locations under provider terms

Transfer mechanism where required: Vercel DPA; EU Standard Contractual Clauses Modules 2/3 and UK International Data Transfer Addendum

2. New-Subprocessor notices

Customers may subscribe to material new-Subprocessor notices by emailing info@chemcalpro.com from an authorized Company Admin address with the subject Subscribe — Subprocessor Notices.

ChemCal Pro will update this list before a newly engaged direct Subprocessor begins Processing Customer Personal Data, except where an emergency replacement is reasonably necessary to protect the Service and permitted by applicable law. Where the DPA gives Customer an objection right, the notice and objection procedure in the DPA applies.

3. Provider changes

Stripe, Calendly, an external transactional-email provider, monitoring provider, analytics provider, or similar vendor is not a current ChemCal Pro Subprocessor solely because it is contemplated, optional, present in a development plan, or available through an integration. ChemCal Pro will add a provider before activating it in production if it will Process Customer Personal Data on ChemCal Pro’s behalf.

4. Contact

ChemCal Pro LLC

63 Marino Drive

Missouri City, Texas 77459

United States

Email: info@chemcalpro.com

Subject: Subprocessor Question