Subprocessors
The following service providers process personal data for Transparify.
Vercel Inc., USA
- Purpose
- Hosting of the application, web analytics without cookies
- Data concerned
- All data transmitted through the application, log data
- Place of processing
- Frankfurt am Main, Germany
- Third-country safeguard
- EU Standard Contractual Clauses / Data Privacy Framework
Supabase Inc., USA (on Amazon Web Services)
- Purpose
- Database, file storage, backups
- Data concerned
- Account, case, order and invoice data, stored documents
- Place of processing
- EU, currently Ireland
- Third-country safeguard
- EU Standard Contractual Clauses / Data Privacy Framework
Stripe Payments Europe, Ltd., Ireland
- Purpose
- Payment processing, invoicing
- Data concerned
- Name, billing address, email, payment data
- Place of processing
- EU (possible transfer to Stripe Inc., USA)
- Third-country safeguard
- EU Standard Contractual Clauses / Data Privacy Framework
Brevo (Sendinblue SAS), France
- Purpose
- Sending transactional emails
- Data concerned
- Email address, name, email contents
- Place of processing
- EU
- Third-country safeguard
- not required
Handelsregister.ai
- Purpose
- Retrieval of public commercial-register data, watchlist
- Data concerned
- Search details for the company (company name, register number)
- Place of processing
- TODO
- Third-country safeguard
- TODO
OpenStreetMap Foundation, United Kingdom (Nominatim)
- Purpose
- Address suggestions
- Data concerned
- Entered search text, no IP address
- Place of processing
- United Kingdom
- Third-country safeguard
- Adequacy decision
GeoNames
- Purpose
- Place suggestions
- Data concerned
- Entered search text, no IP address
- Place of processing
- TODO
- Third-country safeguard
- TODO
| Service provider | Purpose | Data concerned | Place of processing | Third-country safeguard |
|---|---|---|---|---|
| Vercel Inc., USA | Hosting of the application, web analytics without cookies | All data transmitted through the application, log data | Frankfurt am Main, Germany | EU Standard Contractual Clauses / Data Privacy Framework |
| Supabase Inc., USA (on Amazon Web Services) | Database, file storage, backups | Account, case, order and invoice data, stored documents | EU, currently Ireland | EU Standard Contractual Clauses / Data Privacy Framework |
| Stripe Payments Europe, Ltd., Ireland | Payment processing, invoicing | Name, billing address, email, payment data | EU (possible transfer to Stripe Inc., USA) | EU Standard Contractual Clauses / Data Privacy Framework |
| Brevo (Sendinblue SAS), France | Sending transactional emails | Email address, name, email contents | EU | not required |
| Handelsregister.ai | Retrieval of public commercial-register data, watchlist | Search details for the company (company name, register number) | TODO | TODO |
| OpenStreetMap Foundation, United Kingdom (Nominatim) | Address suggestions | Entered search text, no IP address | United Kingdom | Adequacy decision |
| GeoNames | Place suggestions | Entered search text, no IP address | TODO | TODO |
Google Analytics runs only on the website and only after consent. It does not process case data.
Changes to this list
New subprocessors are announced by email at least 30 days in advance. Customers can object.
Change history
| Date | Change |
|---|---|
| 16.10.2026 | First version of the list |