trygga subprocessors
Version 1.0 — effective from 1 September 2026
These providers process personal data for trygga. We give every workspace owner at least 30 days’ notice of a new provider or a change.
| Provider | What it does | Where data is stored | Transfer safeguard |
|---|---|---|---|
| Supabase Pte. Ltd. (Singapore) | Database, sign-in and live updates on screen | AWS eu-west-1, Ireland | Data processing agreement with standard contractual clauses |
| Vercel Inc. (US) | Runs the app | Region dub1, Ireland. Requests pass through Vercel’s global network | Data processing agreement with standard contractual clauses (Pro) |
| Cloudflare, Inc. (US) | Stores files and profile photos (R2) | EU jurisdiction | Data processing agreement with standard contractual clauses |
| Plus Five Five, Inc. (US), trading as Resend | Sends trygga emails | eu-west-1, Ireland | Data processing agreement with standard contractual clauses |
| Google Cloud EMEA Limited (Ireland), Google Workspace | Mailbox for website enquiries and support requests from the app | Worldwide; no commitment to exclusive EU storage | Cloud Data Processing Addendum, with standard contractual clauses where applicable |
These providers’ data processing agreements:
- Supabase: https://supabase.com/legal/customer-resources/data-processing-addendum
- Vercel: https://vercel.com/legal/dpa
- Cloudflare: https://www.cloudflare.com/cloudflare-customer-dpa/
- Resend: https://resend.com/legal/dpa
- Google Workspace: https://cloud.google.com/terms/data-processing-addendum/
The Supabase entry assumes a direct subscription under its public terms. For purchases through AWS Marketplace, those terms name Supabase, Inc. as the contracting party.