PetPoint sub-processors
PetPoint uses the following sub-processors to provide the Service. We notify business owners at least 30 days before adding or replacing a sub-processor (DPA, section 6); a business may object and terminate.
| Sub-processor | Legal entity | What it does | Data | Where data is stored / processed | Transfers outside the EU |
|---|---|---|---|---|---|
| Neon | Neon, Inc. (USA) | main Postgres database | all Service data | AWS eu-central-1 (Frankfurt) | possible remote support from the USA — DPA + SCC/DPF |
| Vercel | Vercel Inc. (USA) | hosting of the CRM, salon websites and platform website; functions | data in processing, request logs (IP, URL) | functions in fra1 (Frankfurt); CDN/edge — global | DPF + SCC (Vercel DPA) |
| Vercel Blob | Vercel Inc. | files: logos, gallery, pet photos, receipts | images, may show people | EU store region | as Vercel |
| Resend | Resend, Inc. (USA) | sending emails (sign-in, invitations, reminders) | email address, name, email content | EU sending region | DPF/SCC (Resend DPA) |
| GitHub | GitHub, Inc. (USA, Microsoft) | nightly encrypted database backups (kept 30 days) | full database copy, encrypted with AES-256 | USA | DPF/SCC (GitHub DPA) |
| Stripe | Stripe Payments Europe, Ltd. (Ireland) | subscription payments, invoices and receipts | payer details of the business, card | EU + USA | Stripe is an independent controller of payment data; Stripe DPA |
Planned sub-processors are added to this list before the feature that uses them is switched on.