Subprocessors

Third-party service providers we work with to deliver our services

Last updated: January 15, 2025

Sillion engages carefully selected third-party subprocessors to support the delivery of our services. All subprocessors are bound by data processing agreements that ensure GDPR and CCPA compliance. We regularly review and update this list as our vendor relationships evolve.

Infrastructure & Hosting

Vercel Inc.

Processing Purpose

Web hosting, content delivery, and application deployment

Data Locations

United States, European Union

Legal Basis

Contractual necessity for service delivery

Data Types Processed

Application logsPerformance metricsUser IP addresses

Last reviewed: January 15, 2025

Supabase Inc.

Processing Purpose

Database hosting, authentication, and real-time data synchronization

Data Locations

United States, European Union

Legal Basis

Contractual necessity for service delivery

Data Types Processed

User account dataApplication dataAuthentication tokens

Last reviewed: January 15, 2025

Cal.com Inc.

Processing Purpose

Calendar scheduling and booking functionality

Data Locations

United States, European Union

Legal Basis

Contractual necessity for service delivery

Data Types Processed

Calendar dataBooking informationUser preferences

Last reviewed: January 15, 2025

Stripe Inc.

Processing Purpose

Payment processing and financial transaction handling

Data Locations

United States, European Union

Legal Basis

Contractual necessity for payment processing

Data Types Processed

Payment informationTransaction recordsBilling data

Last reviewed: January 15, 2025

Communication Services

Resend Inc.

Processing Purpose

Transactional email delivery and email infrastructure

Data Locations

United States

Legal Basis

Contractual necessity and legitimate interest

Data Types Processed

Email addressesEmail contentDelivery metrics

Last reviewed: January 15, 2025

Development & Debugging

Functional Software Inc. (Sentry)

Processing Purpose

Error monitoring, performance tracking, and application debugging

Data Locations

United States

Legal Basis

Legitimate interest for service improvement

Data Types Processed

Error logsPerformance dataUser session data

Last reviewed: January 15, 2025

Analytics & Insights

PostHog Inc.

Processing Purpose

Product analytics, user behavior tracking, and feature flags

Data Locations

United States, European Union

Legal Basis

Legitimate interest for product improvement

Data Types Processed

Usage analyticsFeature interaction dataUser journey data

Last reviewed: January 15, 2025

Data Processing Agreements

All subprocessors listed above have signed comprehensive Data Processing Agreements (DPAs) that include:

• GDPR Article 28 compliance requirements
• Data security and confidentiality obligations
• Data breach notification procedures
• Data subject rights support mechanisms
• International transfer safeguards where applicable

For questions about our subprocessor relationships or to request copies of relevant DPAs, contact us at privacy@sillion.app