Policy
Sub-processors
The third parties that process personal data for KitchenSavers, and where.
- Version
- v1
- Effective
- Not yet in force
These companies process personal data on our behalf to provide KitchenSavers. This list forms part of the Data Processing Agreement, which explains the basis for sending data to each region.
Changes to this list
We give every account owner 30 days' written notice, by email, before adding or replacing a sub-processor. You can object within 14 days of the notice, as the Data Processing Agreement describes. We may remove a sub-processor without notice.
| Company | What it does | Where | Data | Terms |
|---|---|---|---|---|
| Supabase | Database, Auth, Storage, Edge Functions | London, UK (eu-west-2) | all compliance + reading data; authentication data | Data processing terms |
| Vercel | Next.js hosting and serverless functions, CI/CD | Functions in London, UK (lhr1); builds, logs and account data in the US | application requests and responses in transit; request metadata; access logs | Data processing terms |
| Resend | Transactional email delivery | Sends from eu-west-1 (Ireland); account data, metadata and logs in the US | email metadata; recipient email addresses | Data processing terms |
| Sentry | Error monitoring, PII-scrubbed crash logs | EU (Germany) | scrubbed error payloads | Data processing terms |