AdoptIQ Sub-processors
Last updated: [Date]
This page lists the third parties AdoptIQ engages to help deliver our Service. Each is bound by a Data Processing Agreement that imposes obligations substantially equivalent to those in our DPA with you.
Notification of changes
We notify customers of additions or replacements at least 30 days before the change takes effect, by emailing the address on file.
To subscribe to a feed of changes (RSS / email): [link].
Current sub-processors
| Sub-processor | Service | Data location | DPA in place |
|---|---|---|---|
| Microsoft Azure | Application hosting (App Service, Container Registry, Blob Storage, Key Vault) | EU (e.g., West Europe) | Yes |
| Vercel | Frontend hosting and edge delivery | EU + Global with EU SCCs | Yes |
| Supabase | Database (Postgres) and authentication | EU region | Yes |
| GitHub | Source control and CI/CD | USA + Global with EU SCCs | Yes |
Stripe [CONFIRM IF USED] | Payment processing | EU + USA with EU SCCs | Yes |
Sentry [CONFIRM IF USED] | Application error tracking | EU region | Yes |
| PostHog | Product analytics — browser (consent-gated) and server-side onboarding-funnel events (no personal data, not cookie-gated) | EU region | Yes |
| Zoho | Business email (Zoho Mail) and document storage | EU region | Yes |
| Resend | Transactional email (notifications, onboarding reminders, password resets) | EU + USA with EU SCCs | Yes |
Slack [CONFIRM IF USED] | Internal communications (no customer data) | USA + EU with EU SCCs | Yes |
International transfers
Where data leaves the EEA, transfers rely on the European Commission's Standard Contractual Clauses (Module Two) and a Transfer Impact Assessment specific to each receiving country. Copies are available on request from [email protected].
Affiliates
AdoptIQ may also process Personal Data through its corporate affiliates, where any. Currently: none. [CONFIRM]
History
Past changes:
| Date | Change |
|---|---|
| [Date] | Initial publication. |