Changes are announced 14 days in advance (see DPA §5).
| Subprocessor | Purpose | Location / transfer mechanism |
|---|---|---|
| Stripe Payments Europe Ltd. (and Stripe, Inc.) | Payment processing, Connect payouts, subscription billing | EU / US — DPF + SCCs |
| Supabase Inc. | Database, storage, scheduled jobs (project hosted in EU region) | EU hosting; support access US — SCCs |
| Vercel Inc. | Application hosting, edge network | EU/US — DPF + SCCs |
| Clerk Inc. | Authentication and account management | US — DPF + SCCs |
| Resend (Plus Five Five, Inc.) | Transactional and marketing email delivery | US — DPF/SCCs |
Underlying cloud providers of the above (e.g. AWS EU regions) act as their sub-subprocessors under their respective agreements.
Providers we use for our own purposes
The providers below do not process Organizers' data on their behalf, so they are not subprocessors under the DPA and are not part of the list above. Adding a provider here does not change that list. We use them as controller, to run and improve Strobo.
| Provider | Purpose | Location / transfer mechanism |
|---|---|---|
| PostHog, Inc. | Product analytics and session recording: how signed-in Organizers use the organizer panel and, with Analytics consent (and the separate Session recording consent for recordings), how visitors use strobo.events (Cookie Policy §3 and §3A) | Data stored in the EU (PostHog Cloud EU, Frankfurt); PostHog, Inc. is in the US — DPF + SCCs |
| Sentry (Functional Software, Inc.) | Error monitoring: reports of errors in the app (app.strobo.events), to detect and fix failures (Privacy Policy §2) | Error reports stored in the EU (Frankfurt, Germany); Functional Software, Inc. is in the US — DPF, with SCCs as fallback |