> Canonical page: https://www.sellready.eu/en/subprocessors

# Subprocessors

> Every service that processes personal data on behalf of SellReady – with purpose, location and transfer basis.

These services process data on behalf of SellReady. The list is generated from the same source our security page uses.

## Subprocessors

- **Vercel** — Application hosting, server functions, scheduled jobs, cookieless web statistics (Frankfurt (fra1), no fallback region outside the EU, US company: standard contractual clauses and EU-US Data Privacy Framework)
- **Supabase** — Database, file storage for documents, background jobs (Frankfurt (eu-central-1), US company: standard contractual clauses and EU-US Data Privacy Framework)
- **Stripe** — Payment processing, subscriptions, invoices, VAT calculation (Primarily EU, US company: standard contractual clauses and EU-US Data Privacy Framework)
- **Amazon SES** — Sending system emails such as sign-in codes, reminders and export notifications (Frankfurt (eu-central-1), dedicated AWS account, US company: standard contractual clauses and EU-US Data Privacy Framework)
- **Sentry** — Error and stability monitoring (EU region (Frankfurt), US company: standard contractual clauses and EU-US Data Privacy Framework)
- **Vercel AI Gateway** — AI suggestions for product classification – you confirm every suggestion, can be switched off per shop (Frankfurt (AWS Bedrock, eu-central-1), no storage beyond the request, US company: standard contractual clauses and EU-US Data Privacy Framework)

## Deliberately not in use

- Google Analytics, PostHog or Matomo – we only use cookieless statistics.
- Google Fonts or other font CDNs – fonts are served from our own server.
- Resend or Postmark – we send emails through a provider based in the EU.
- Additional storage or workflow services – files and background jobs run at our database provider in Frankfurt.

## Changes

Before a new subprocessor processes any data, we add it here and notify customers with a DPA by email in advance.