Subprocessors

Last updated: 1 March 2025

AtmosLedger uses the following third-party service providers ("subprocessors") to help deliver our services. All subprocessors have been reviewed to ensure they meet our data protection and security requirements, and appropriate contractual protections are in place (including Standard Contractual Clauses where required).

SubprocessorPurposeLocationData processed
Vercel Inc.Hosting and content deliveryUnited StatesApplication data, usage logs
Supabase Inc.Database and authenticationUnited StatesAccount data, emissions data, uploaded documents
Stripe Inc.Payment processingUnited StatesBilling information, payment details
Resend Inc.Transactional email deliveryUnited StatesEmail addresses, notification content
PostHog Inc.Product analyticsEuropean UnionUsage analytics, feature interactions (anonymised)
OpenAI Inc.AI-powered advisor (optional feature)United StatesUser queries, emissions summaries (when advisor is used)
Sentry.ioError monitoring and performance trackingUnited StatesError logs, performance metrics

Changes to Subprocessors

We may update this list from time to time as we add or remove subprocessors. We will provide at least 14 days' notice before engaging a new subprocessor that processes personal data.

If you have concerns about a new subprocessor, you may object by contacting us at privacy@atmosledger.com within 14 days of receiving notice.

Data Transfer Mechanisms

For subprocessors located outside the European Economic Area (EEA), we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • EU-U.S. Data Privacy Framework certification (where applicable)
  • Binding Corporate Rules (where applicable)

Questions

If you have questions about our use of subprocessors or data processing practices, please contact our Data Protection Officer at privacy@atmosledger.com.

AtmosLedger Ltd · Registered in England & Wales · Company No. 12345678