Subprocessors
Version 1 — draft pending legal review. This list reflects what is actually deployed today, cross-checked against the codebase. It has not yet been reviewed by a lawyer.
A subprocessor is a company we rely on to help run the platform, and that may process personal data on our behalf. This page lists every one we currently use.
Data processors
| Company | What they do | Data | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage and realtime updates — the core of the platform runs on it. | All platform data | Frankfurt, Germany (eu-central-1) |
| Vercel | Hosts and runs the website itself. All server functions are pinned to the Frankfurt region. | Data passing through a request (Vercel does not hold a separate copy of the database) | Frankfurt, Germany (fra1). Vercel Inc. is a US-domiciled company — [status of the Data Processing Agreement and international transfer safeguard with Vercel to be confirmed]. |
Planned, not yet in production
- Error tracking (candidate: Sentry, EU region) — planned for production monitoring but not yet configured in this codebase. [to be confirmed before launch].
Not a subprocessor, and why
- Email delivery. Notification emails are sent from EO's own mail server, not through a third-party email company. There is no external email subprocessor.
- Google Calendar / Microsoft Outlook, if you choose to connect one. That connection is between you and your own calendar account — we do not process your calendar data as a subprocessor, and connecting is entirely optional.
- Surveys. Program surveys run on our own database (Supabase, above), not a separate survey company.
- Analytics. We do not use any third-party analytics or tracking service.
Changes to this list
If we add or change a subprocessor that handles personal data, we will update this page and, where required, tell you in advance.
Questions: privacy@eo-mentorship.com.