Last updated: September 28, 2026
Subprocessors
These services process data on behalf of SellReady. The list is generated from the same source our security page uses.
Draft – pending legal review
This text is a draft and will be reviewed by a lawyer before launch. Passages in [square brackets] are placeholders.
This English version is provided for convenience. The German version prevails.
Vercel Inc.
- Purpose
- Application hosting, server functions, scheduled jobs, cookieless web statistics
- Data processed
- All requests to the application, server logs (IP address, short-term), aggregated statistics
- Location
- Frankfurt (fra1), no fallback region outside the EU
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
- Agreement
- Vercel data processing terms
Supabase Inc.
- Purpose
- Database, file storage for documents, background jobs
- Data processed
- All customer data: profiles, listings, checks, tasks, document files
- Location
- Frankfurt (eu-central-1)
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
- Agreement
- Supabase data processing terms
Stripe Payments Europe Ltd. / Stripe, Inc.
- Purpose
- Payment processing, subscriptions, invoices, VAT calculation
- Data processed
- Name or company, billing address, VAT ID, payment method metadata (card data only at Stripe)
- Location
- Primarily EU
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
- Agreement
- Stripe data processing terms
Amazon Web Services EMEA SARL / Amazon.com, Inc.
- Purpose
- Sending system emails such as sign-in codes, reminders and export notifications
- Data processed
- Email address, name (if provided), content of the respective email only while sending; email addresses with a bounce or complaint remain on the suppression list until removed
- Location
- Frankfurt (eu-central-1), dedicated AWS account
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
- Agreement
- Amazon SES data processing terms
Functional Software, Inc. (Sentry)
- Purpose
- Error and stability monitoring
- Data processed
- Error reports and technical request data, stripped of personal data before sending
- Location
- EU region (Frankfurt)
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
- Agreement
- Sentry data processing terms
Vercel AI Gateway → Amazon Web Services (Bedrock)
- Purpose
- AI suggestions for product classification – you confirm every suggestion, can be switched off per shop
- Data processed
- Title, description, tags, materials and category of individual listings – no images, no buyer data
- Location
- Frankfurt (AWS Bedrock, eu-central-1), no storage beyond the request
- Transfer
- US company: standard contractual clauses and EU-US Data Privacy Framework
| Provider | Purpose | Data processed | Location | Transfer | Agreement |
|---|---|---|---|---|---|
| Vercel Inc. | Application hosting, server functions, scheduled jobs, cookieless web statistics | All requests to the application, server logs (IP address, short-term), aggregated statistics | Frankfurt (fra1), no fallback region outside the EU | US company: standard contractual clauses and EU-US Data Privacy Framework | Vercel data processing terms |
| Supabase Inc. | Database, file storage for documents, background jobs | All customer data: profiles, listings, checks, tasks, document files | Frankfurt (eu-central-1) | US company: standard contractual clauses and EU-US Data Privacy Framework | Supabase data processing terms |
| Stripe Payments Europe Ltd. / Stripe, Inc. | Payment processing, subscriptions, invoices, VAT calculation | Name or company, billing address, VAT ID, payment method metadata (card data only at Stripe) | Primarily EU | US company: standard contractual clauses and EU-US Data Privacy Framework | Stripe data processing terms |
| Amazon Web Services EMEA SARL / Amazon.com, Inc. | Sending system emails such as sign-in codes, reminders and export notifications | Email address, name (if provided), content of the respective email only while sending; email addresses with a bounce or complaint remain on the suppression list until removed | Frankfurt (eu-central-1), dedicated AWS account | US company: standard contractual clauses and EU-US Data Privacy Framework | Amazon SES data processing terms |
| Functional Software, Inc. (Sentry) | Error and stability monitoring | Error reports and technical request data, stripped of personal data before sending | EU region (Frankfurt) | US company: standard contractual clauses and EU-US Data Privacy Framework | Sentry data processing terms |
| Vercel AI Gateway → Amazon Web Services (Bedrock) | AI suggestions for product classification – you confirm every suggestion, can be switched off per shop | Title, description, tags, materials and category of individual listings – no images, no buyer data | Frankfurt (AWS Bedrock, eu-central-1), no storage beyond the request | US company: standard contractual clauses and EU-US Data Privacy Framework | Vercel AI Gateway data processing terms |
Deliberately not in use
- Google Analytics, PostHog or Matomo – we only use cookieless statistics.
- Google Fonts or other font CDNs – fonts are served from our own server.
- Resend or Postmark – we send emails through a provider based in the EU.
- Additional storage or workflow services – files and background jobs run at our database provider in Frankfurt.
Changes
Before a new subprocessor processes any data, we add it here and notify customers with a DPA by email in advance.