Sub-processors
Third-party data processors engaged by Club Ops under Art. 28 GDPR. Per the customer's Data Processing Agreement, changes to this list are notified at least 30 days in advance.
Supabase Inc.
CorePrimary Postgres database, authentication, object storage and Vault secret storage.
- Role
- Database / Auth / Storage / Vault
- Region
- EU (Frankfurt, Dublin)
- Added
- 2025-01-01
Vercel Inc.
CoreApplication hosting, server-side rendering, cron scheduler.
- Role
- Compute / Cron / Edge runtime
- Region
- EU primary, global edge
- Added
- 2025-01-01
Anthropic PBC
CoreClaude API for the Boop assistant + invoice VAT auto-classification. Zero-retention via Vercel AI Gateway.
- Role
- LLM (AI assistant + invoice classification)
- Region
- US (Standard Contractual Clauses)
- Added
- 2025-03-15
Resend, Inc.
CoreOutbound transactional email (notifications, reminders, sub-processor changes).
- Role
- Transactional email
- Region
- EU
- Added
- 2025-04-10
Stripe Payments Europe Ltd.
OptionalSubscription billing for customer venues that activate paid plans. Skipped on self-hosted or free tier.
- Role
- SaaS billing (W5-D)
- Region
- EU / global
- Added
- 2026-04-01
Telegram FZ-LLC
OptionalOutbound + inbound Telegram bot messages for staff who individually link their Telegram chat. Skipped if not configured.
- Role
- Bot messaging (opt-in)
- Region
- Global
- Added
- 2025-06-01
Meta Platforms Ireland Ltd. (WhatsApp Cloud API)
OptionalOutbound + inbound WhatsApp messages via Cloud API for venues with the WhatsApp adapter configured.
- Role
- Business messaging (opt-in)
- Region
- EU / global
- Added
- 2026-02-01
OpenAI, L.L.C.
OptionalWhisper API for transcribing voice notes sent through the Telegram or WhatsApp adapter. Zero-retention configuration.
- Role
- Voice-to-text (Whisper)
- Region
- US (Standard Contractual Clauses)
- Added
- 2025-08-01