Legal

Sub-processors

The providers that process personal data on behalf of Smallprint customers. We give at least 30 days’ notice before adding a new one.

Last updated 6 November 2026

ProviderWhat it doesWhereSafeguard
SupabaseDatabase, sign-in, photo and file storageEU (Stockholm, Sweden)Data stays in the chosen region; EU standard contractual clauses with the UK Addendum where it leaves
VercelHosts the website and runs the appEU servers (Stockholm) and a global delivery networkEU standard contractual clauses with the UK International Data Transfer Addendum
StripeCard payments and invoices (account holders only)UK, EU and USEU-US Data Privacy Framework with the UK Extension
ResendSends sign-in, training, reminder and hirer emailsUSEU-US Data Privacy Framework with the UK Extension

Other services

Need a data processing agreement for your organisation? Use the Chat to us button and we will send ours.

Sub-processors | Smallprint