Sub-processor list v1 — last updated 2026-04-29.
Sub-processors
Aperture Analytics Limited uses the following third-party processors to operate Supp. We have a Data Processing Agreement (DPA) or equivalent contractual terms in place with each.
| Processor | Purpose | Location | Contract |
|---|---|---|---|
| Stripe Payments Europe Ltd | Payment processing | IE / US | Standard DPA (linked from Stripe dashboard) |
| Resend Inc. | Transactional email | US | Standard DPA |
| Neon Inc. | Database hosting (Postgres) | EU (Frankfurt, Germany) | Standard ToS |
| Railway Corp. | Application hosting + analytics hosting | US | Standard DPA |
| Google Cloud (GCP) | Notification scheduling (Cloud Tasks) | EU (Belgium) | Standard DPA |
| Cloudflare R2 | Encrypted database backups (offsite) | EU | Standard DPA |
Notification of changes
Material additions to this list (new processor, new processing category) are emailed to all account-holders 30 days before they take effect. Replacements that don't change the data category, location, or processor type are noted here without prior notice.