Infrastructure
| Processor |
Purpose |
Data location |
| Supabase |
Database hosting, authentication, and real-time services |
UK (eu-west-2) |
| Amazon Web Services (AWS) |
Document and photo storage (S3), content delivery (CloudFront), document scanning (Textract), identity verification (Rekognition) |
UK (eu-west-2) |
| Render |
API server hosting |
EU (Frankfurt) |
| Vercel |
Web application hosting |
EU edge |
Communications
| Processor |
Purpose |
Data location |
| Resend |
Transactional email delivery |
EU |
| The SMS Works |
Text messages for people who do not yet have the app: account set-up links, sign-in codes and visitor invitations. Receives the recipient's mobile number and the message text. Replaces Vonage, effective 10 October 2026. |
UK |
| Expo |
Mobile push notifications |
US (SCCs in place) |
AI and customer support
| Processor |
Purpose |
Data location |
| Anthropic |
AI features: reading delivery notes from a photo, drafting induction content, choosing the right report for a question, summarising public safety bulletins, and sorting and answering support requests. Receives only the content needed for the task in hand (for example the delivery note image or the support request text). Under Anthropic's commercial terms, this data is not used to train its models. |
US (SCCs and UK Addendum in place) |
| Zoho Desk |
Customer support ticketing: support requests sent to us and our replies. |
EU |
Payments
| Processor |
Purpose |
Data location |
| Stripe |
Payment processing and subscription billing. Stripe processes billing contact details only; worker personal data is not shared with Stripe. |
EU/US (SCCs in place) |
Monitoring and error tracking
| Processor |
Purpose |
Data location |
| Sentry |
Application error monitoring. Configured to scrub personal data from error reports. |
EU |
| PostHog |
Product analytics - which features are used, so we know what to improve. Receives internal identifiers only (user, worker and organisation IDs, and role names); no names, email addresses or contact details are sent. |
EU |
Questions about this list can be directed to privacy@attendiq.co.uk.