subprocessors.
The companies that process customer data on our behalf. Each one is bound by a data processing agreement and may use the data only to provide its service to us.
last updated 20 October 2026WIN GRAVITY SRL
the list
4 companies| company | purpose | data | location |
|---|---|---|---|
| Vercel Inc. | hosting, application servers, scheduled jobs, cookieless analytics | all service data in transit; request metadata | United States |
| Neon, Inc. | managed Postgres database | all stored service data | European Union (Frankfurt) |
| Resend (Plus Five Five, Inc.) | transactional email: sign-in links, invitations, reports | recipient email, the email body (names, org name, report figures) | United States |
| Stripe, Inc.when billing opens | payments, invoices, tax | billing contact, payment method, organization name | United States |
changes
GitHub is not on the list: it is the source a customer connects, not a company we hire. Transfers to the United States rely on the Standard Contractual Clauses or, where the company is certified, the EU-US Data Privacy Framework.
Before we add or replace a subprocessor, we email the owners of every connected organization and update this page at least 30 days ahead, as the data processing addendum sets out. Questions go to privacy@slashscore.com.