Subprocessors
Last updated on October 16, 2026
Draft pending legal review: this text is not binding yet.
The providers below may process personal data to run the service. We tell customers by email at least 30 days before adding one.
Current list
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, authentication, file storage | EU, Paris (AWS eu-west-3) |
| Vercel Inc. | Application hosting | EU, Paris (cdg1) |
| Stripe Payments Europe Ltd | Payments and invoices (Team plan) | EU, Ireland |
| Resend | Transactional emails | [to confirm] |
Slack is not on this list: when an organization connects its workspace, Slack processes messages under that organization's own Slack agreement.
Data processing agreement
Our DPA (GDPR article 28) is ready to sign. Ask for it at privacy@tokkohq.com.