Annexes
ANNEX 5 – Subprocessor List
Version v1.4Last updated June 10, 2026
| PROVIDER | PURPOSE | LOCATION / TRANSFERS |
|---|---|---|
| Clerk | Authentication and identity management | Germany (EU/EEA) |
| Vercel | Application hosting, edge network and web service infrastructure | Sweden and France (EU/EEA) |
| Supabase | File and image storage | EU |
| Microsoft Azure | Outlook and Microsoft calendar integrations | Sweden (EU/EEA) |
| Google LLC / Google Cloud | Google Calendar integrations and possible Google model services | EU or USA (service-dependent); transfers under GDPR Chapter V: SCCs and/or EU–US DPF as applicable |
| Stripe | Processing of payments, subscriptions and invoicing | EU |
| Resend | Sending and receiving email | EU |
| Recall.ai | Processing of meeting bots, recordings and transcripts | EU (eu-central-1) |
| Slack | Slack integrations and processing of message content via the integration | EU |
| OpenRouter | Routing of AI requests to model services | EU. Language model usage follows the Zero Data Retention principle, including via OpenRouter. |
Changes will be notified at least 30 days in advance. The data controller (i.e., the user) has the right to object to the notified change for a justified reason, such as insufficient data security with the new subprocessor.