Skip to content

Legal

Subprocessors

The services that process personal data on our behalf, what each one handles and where. Lab owners receive 30 days' notice by email before a new subprocessor is added.

Last updated

Status: this is the planned list for launch. It is confirmed, with each provider's processing location, before the first lab enters data.

ProviderPurposeDataLocation
SupabaseDatabase, file storage and authentication for the applicationAll laboratory records and files, user accountsHosting region, confirmed before launch
VercelRuns the application serversData in transit while a request is processedHosting region, confirmed before launch for application servers; static files on a global network
BackblazeWeekly backup copy of file storageStored files (certificates, reports, evidence)To be confirmed with the hosting region
StripePayments, invoices and sales taxBilling contact, billing address, tax ID, payment card (held by Stripe only)United States and Ireland
ResendSends application email (weekly due list, invitations, export links)Recipient name and email, email contentUnited States
AnthropicAnswers questions in the in-app help box and proposes column mappings for CSV importThe question asked; for imports, column headers and five sample rows. No certificates or files.United States
SentryApplication error reportsTechnical error details, user IDTo be confirmed before launch
UpstashRate limitingIP address and lab ID counters, short-livedTo be confirmed with the hosting region
PlausibleCookieless website and application usage statisticsAggregated page views; no cookies, no personal profilesEuropean Union
Microsoft (Clarity)Website usage analytics and session recordings, only for visitors who accept analytics cookiesClicks, scrolls, page views, device and browser details, approximate location; form input is maskedUnited States
CloudflareHosts this website, its contact forms and email notificationsWebsite form submissions, IP address and country of visitorsGlobal network; form submissions stored in Cloudflare KV

Questions or objections to a change: privacy@accreditbook.com. See also the data processing agreement and privacy policy.