Sub-processors
formpuppy (Pairtok Co.,Ltd.) uses the following sub-processors to deliver the service. In accordance with GDPR Article 28, we have appropriate agreements (Standard Contractual Clauses or DPA) in place with each sub-processor.
| Service | Location | Purpose | Transfer Mechanism | Privacy Policy |
|---|---|---|---|---|
| Supabase | US | Authentication and database hosting | SCC | View |
| Anthropic | US | AI email classification (Claude) | SCC | View |
| Resend | US | Email receiving and sending | SCC | View |
| Vercel | US | Application hosting and performance monitoring | SCC | View |
| PostHog | EU | Product analytics (cookieless, EU Cloud) | DPA | View |
| Cloudflare (Turnstile) | US | Bot protection on sign-up and login forms | SCC | View |
| Google (OAuth) | US | Optional social login | SCC | View |
| Sentry | US | Error monitoring (stack traces only, no personal data) | SCC | View |
| Stripe | US | Payment processing for paid plans | SCC | View |
We will provide at least 30 days' notice by email before adding any new sub-processor. To object, contact our privacy team.