Sub-processors
Version 1.0 · 29 October 2026
These providers process personal data for us. Each is bound by a data processing agreement. Businesses on Aftermade authorise these sub-processors under our Data Processing Agreement. We give at least 30 days' notice of any addition or replacement, by email to account owners and on this page, so businesses can object.
| Provider | What it does for us | Data involved | Location of data | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Database, sign-in, file storage (photos, logos), backups | All account, business and customer data | Ireland (AWS eu-west-1) | Stored in the EU; Standard Contractual Clauses for any access from outside the EU |
| Netlify, Inc. | Hosting the app and website; running the server code; receiving the pilot request form on our website | Data passing through requests; technical logs (IP addresses); pilot requests (name, business, email, what you make) | Global network; servers may be in the USA | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Sending emails (invitations, order updates, sign-in emails) | Recipient email address, email content, delivery status | EU sending region | EU–US Data Privacy Framework and Standard Contractual Clauses for any access from outside the EU |
| Functional Software, Inc. (Sentry) | Error reports | Technical details of errors; personal details are removed before sending | EU data region (Germany) | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| OpenStreetMap Foundation (Nominatim) | Turning a typed place name into map coordinates | Only the place name typed (for example "Galway, Ireland"); no names or contact details | United Kingdom | UK adequacy decision |
Questions: hello@aftermade.app.