Subprocessors
Effective 2026-08-22. This list forms part of our Data Processing Agreement.
| Subprocessor | Purpose | Location | Data categories |
|---|---|---|---|
Supabase, Inc. supabase.com | Managed Postgres database, authentication, and object storage. Hosts all customer workforce data. | United Kingdom, eu-west-2 (London) | Account data, workforce schedule data, derived scores, audit events |
Vercel, Inc. vercel.com | Application hosting and edge network for the RotaPulse web application and server functions. | United Kingdom, lhr1 (London) | Server logs, request telemetry, transient session cookies |
Resend, Inc. resend.com | Transactional email delivery: sign in emails, invitations, and service notifications. | European Economic Area, processing under UK GDPR transfer safeguards | Email address, message content for transactional mail |
Stripe Payments UK Ltd stripe.com | Payment processing for paid subscriptions and invoicing. Only used by customers who purchase a paid plan. | United Kingdom and European Economic Area | Billing contact, payment method metadata (no card numbers stored by RotaPulse) |
Anthropic PBC www.anthropic.com | Plain-English explanations of a shift's fatigue score. Engaged only for workspaces that switch AI explanations on, which is off by default. Requests carry the scored output for one shift: Fatigue Index and Relative Risk, component scores, duration, rest gap, job type, shift timing category and threshold warnings. Worker names and worker references are removed before the request leaves RotaPulse. Job type is sent, because the advice has to be right for the role. Anthropic does not train on data submitted through its API. | United States (Anthropic API), under Anthropic's DPA and Standard Contractual Clauses | Shift timings, breaks, job type and derived fatigue scores. No names, no worker references, no contact details |
Change notice
We notify workspace owners by email at least 30 days before adding or replacing a subprocessor. To receive advance notice by another channel, email compliance@rotapulse.co.uk and we will add you to the notification list.