Subprocessor List
This page lists all third-party subprocessors that process personal data on behalf of Planckchron. We maintain this list to ensure transparency and compliance with GDPR Article 28.
About Our Subprocessors
Planckchron uses carefully selected third-party service providers (subprocessors) to help deliver our services. Each subprocessor has been vetted for security, privacy compliance, and data protection practices.
All subprocessors are bound by Data Processing Agreements (DPAs) that require them to:
- Process data only on our documented instructions
- Implement appropriate security measures
- Assist with data subject rights requests
- Delete or return data upon termination
- Allow for audits and inspections
Current Subprocessors
Last updated: January 1, 2026
| Subprocessor | Purpose | Location | Safeguards |
|---|---|---|---|
Supabase Inc. Infrastructure | Database hosting, authentication, real-time subscriptions Data: User accounts, application data, session information | United States | SCCs ISO 27001 |
Vercel Inc. Infrastructure | Website hosting, CDN, edge functions, analytics Data: Web traffic, performance metrics, deployment logs | United States (Global CDN) | SCCs ISO 27001 |
Google LLC (Google Analytics) Analytics | Website analytics, user behavior analysis Data: Anonymized usage data, page views, session data | United States | SCCs ISO 27001 |
Sentry.io (Functional Software Inc.) Monitoring | Error monitoring, performance tracking, crash reporting Data: Error logs, stack traces, device information | United States | SCCs ISO 27001 |
Amazon Web Services (AWS) Infrastructure | Cloud infrastructure, storage, compute services Data: Backup data, file storage, processing data | United States (Multi-region) | SCCs ISO 27001 |
Stripe Inc. Payments | Payment processing, subscription management Data: Payment information, billing data, transaction records | United States | SCCs ISO 27001 |
SendGrid (Twilio Inc.) Communications | Transactional email delivery Data: Email addresses, email content, delivery status | United States | SCCs ISO 27001 |
Cloudflare Inc. Security | DDoS protection, DNS, SSL/TLS, CDN services Data: Traffic data, IP addresses, request metadata | United States (Global) | SCCs ISO 27001 |
Supabase Inc.
Purpose:
Database hosting, authentication, real-time subscriptions
Data Types:
User accounts, application data, session information
Location:
United States
Vercel Inc.
Purpose:
Website hosting, CDN, edge functions, analytics
Data Types:
Web traffic, performance metrics, deployment logs
Location:
United States (Global CDN)
Google LLC (Google Analytics)
Purpose:
Website analytics, user behavior analysis
Data Types:
Anonymized usage data, page views, session data
Location:
United States
Sentry.io (Functional Software Inc.)
Purpose:
Error monitoring, performance tracking, crash reporting
Data Types:
Error logs, stack traces, device information
Location:
United States
Amazon Web Services (AWS)
Purpose:
Cloud infrastructure, storage, compute services
Data Types:
Backup data, file storage, processing data
Location:
United States (Multi-region)
Stripe Inc.
Purpose:
Payment processing, subscription management
Data Types:
Payment information, billing data, transaction records
Location:
United States
SendGrid (Twilio Inc.)
Purpose:
Transactional email delivery
Data Types:
Email addresses, email content, delivery status
Location:
United States
Cloudflare Inc.
Purpose:
DDoS protection, DNS, SSL/TLS, CDN services
Data Types:
Traffic data, IP addresses, request metadata
Location:
United States (Global)
International Data Transfers
When personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:
Standard Contractual Clauses
EU-approved SCCs (2021/914) are in place with all US-based subprocessors.
Supplementary Measures
Technical measures including encryption in transit and at rest, access controls.
Subprocessor Change Notifications
We will notify customers of any changes to our subprocessor list at least 30 days before the change takes effect. You can:
- Subscribe to our subprocessor update notifications
- Object to new subprocessors within 14 days of notification
- Request additional information about any subprocessor
To subscribe to subprocessor notifications, email: privacy@planckchron.com
Contact Information
For questions or concerns, please contact the appropriate department:
Legal Affairs
General legal inquiries
Corporate Headquarters
Planckchron Inc
11601 Wilshire Boulevard, Suite 500
Los Angeles, CA 90025
United States
Registered Office
Corporation Trust Company
1209 Orange Street
Wilmington, DE 19801
Related Documents
Privacy Policy
Data protection and privacy practices
Terms of Service
Comprehensive service terms and conditions
Cookie Policy
Information about cookies and tracking
California Privacy Notice
CCPA/CPRA disclosures and consumer rights
Data Processing Addendum
Processing roles, security and transfer terms
Corporate Governance
Board structure and compliance framework
Document Info
Quick Stats
8
Active Subprocessors
100%
With DPAs
100%
ISO 27001
100%
SCCs in Place