Sub-processor List
Last updated: Not yet issued
We publish this list so customers can see exactly who processes their data. We give 30 days’ notice before adding a new sub-processor.
Current sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services EMEA | Application hosting | Frankfurt, Germany |
| Supabase | Database, authentication | Frankfurt, Germany |
| Cloudflare | DNS, network security | Global |
| to be confirmed | Transactional email | to be confirmed |
| to be confirmed | Payment processing | to be confirmed |
| to be confirmed | AI-assisted features | to be confirmed |
The first three rows are confirmed. The remaining three are not yet published because naming a processor we have not verified would be worse than leaving the row open: an incomplete sub-processor list is a statement that turns out to be false. They will be completed before paid subscriptions open.
Changes to this list
We give at least 30 days’ notice before adding a sub-processor, and a customer may object on reasonable grounds. Notice is given by email to the account’s billing contact.