Subprocessors
Effective 2026-04-20. This list forms part of our Data Processing Agreement.
| Subprocessor | Purpose | Location | Data categories |
|---|---|---|---|
Supabase, Inc. supabase.com | Managed Postgres database, authentication, and object storage. Hosts all customer workforce data. | United Kingdom, eu-west-2 (London) | Account data, workforce schedule data, derived scores, audit events |
Vercel, Inc. vercel.com | Application hosting and edge network for the Rotapulse web application and server functions. | United Kingdom, lhr1 (London) | Server logs, request telemetry, transient session cookies |
Resend, Inc. resend.com | Transactional email delivery: sign in emails, invitations, and service notifications. | European Economic Area, processing under UK GDPR transfer safeguards | Email address, message content for transactional mail |
Stripe Payments UK Ltd stripe.com | Payment processing for paid subscriptions and invoicing. Only used by customers who purchase a paid plan. | United Kingdom and European Economic Area | Billing contact, payment method metadata (no card numbers stored by Rotapulse) |
Change notice
We notify workspace owners by email at least 30 days before adding or replacing a subprocessor. To receive advance notice by another channel, email compliance@rotapulse.co.uk and we will add you to the notification list.