GDPR Article 28 Compliance

Authorized Sub-processors & Data Infrastructure

WisdomNest engages authorized third-party service providers (“Sub-processors”) to deliver reliable, high-performance, and secure philosophical publishing services. Each entity undergoes rigorous security evaluation and is bound by formal Data Processing Agreements (DPAs).

Cloudflare, Inc.

Edge Infrastructure & Security
View Cloudflare DPA

Purpose & Service Provided

Global Content Delivery Network (CDN), DDoS mitigation, SSL/TLS encryption, Turnstile bot verification, and Edge Pages hosting.

Categories of Data Handled

IP addresses, request headers, browser telemetry, bot verification tokens.

Entity Location / Hosting Region

United States & Global Edge Network

Security & Certifications

SOC 2 Type II, ISO 27001, PCI DSS 3.2.1, GDPR Compliant

Supabase, Inc.

Cloud Database & Persistence
View Supabase DPA

Purpose & Service Provided

Managed PostgreSQL cloud database hosting for article content, editorial revisions, and administrative metadata.

Categories of Data Handled

Published and draft article text, author profiles, category taxonomy.

Entity Location / Hosting Region

United States (AWS US-East)

Security & Certifications

SOC 2 Type II, HIPAA eligible, AES-256 encryption at rest, TLS 1.3 in transit

Google LLC

AI Processing & SMTP Communications
View Google DPA

Purpose & Service Provided

Google Gemini AI API used strictly for administrative editorial research and Gmail SMTP relay for delivering visitor contact inquiries.

Categories of Data Handled

Administrative prompts submitted during editorial drafting; visitor contact form inquiries.

Entity Location / Hosting Region

United States

Security & Certifications

SOC 2/3, ISO 27001, ISO 27017, ISO 27018, GDPR Compliant

Ahrefs Pte. Ltd.

Privacy-Preserving Web Analytics
View Ahrefs Pte. Ltd. DPA

Purpose & Service Provided

Aggregated visitor traffic analytics, content popularity metrics, and Core Web Vitals performance telemetry without tracking individual users.

Categories of Data Handled

De-identified URL paths, anonymized referrer URLs, aggregated browser types.

Entity Location / Hosting Region

European Union & Singapore

Security & Certifications

GDPR & ePrivacy Directive compliant, no cross-site personal tracking cookies

Sub-processor Due Diligence & Notification Rights

Prior to engaging any new sub-processor, WisdomNest conducts a rigorous technical and security review to ensure the vendor maintains robust confidentiality, encryption at rest and in transit, and continuous uptime commitments.

For questions regarding our Data Processing Agreements or sub-processor updates, please contact our data protection team via our Contact Desk or review our complete Privacy Policy.