Subprocessors
Last updated: 19 July 2026
Ontraq uses the following third-party service providers (Sub-processors) to deliver the Service. Each is contractually bound to handle Personal Information consistent with our Privacy Policy and our Data Processing Agreement.
We give existing customers at least 30 days' notice before adding or replacing a Sub-processor. Customers who object on reasonable data-protection grounds may terminate their Subscription per the DPA.
| Sub-processor | Function | Location | DPA / Privacy |
|---|---|---|---|
| Supabase Inc. | Database (Postgres), authentication, file storage, realtime | Singapore (Amazon Web Services) | Link |
| Stripe Inc. | Subscription billing, payment processing | United States (PCI-DSS compliant) | Link |
| Resend Inc. | Transactional email delivery | United States | Link |
| Vercel Inc. | Web application hosting and edge network | United States, global edge | Link |
| Expo Inc. | Push notifications, mobile build infrastructure | United States | Link |
| Google LLC | Push notification delivery (Firebase Cloud Messaging, Android) | United States | Link |
| Functional Software Inc. (Sentry) | Web application error monitoring | United States | Link |
Not a Sub-processor
The Service uses OpenStreetMap Nominatim for geocoding (converting address strings to GPS coordinates). We send only the address string the user typed; no Personal Information about the user is sent. OpenStreetMap is therefore not treated as a Sub-processor for the purposes of the DPA, but is listed here for transparency.