SC 12—LEGAL
Sub-processors
Last updated · 26 May 2026
To deliver Slatewise we rely on the third-party providers below. Each is contractually bound to protect data to GDPR standards. We give existing customers reasonable notice before adding a new sub-processor.
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Google Firebase | Database (Firestore) & authentication | European Union | Google Cloud DPA; data hosted in EU region |
| Stripe | Subscription billing & payment processing | EU / US | PCI-DSS Level 1; Standard Contractual Clauses |
| Vercel | Application & website hosting | EU / US | Vercel DPA; Standard Contractual Clauses |
| PostHog | Privacy-preserving product analytics | European Union (EU Cloud) | DPA; EU data residency; cookieless & pseudonymous (no name/email/IP) |
| Resend | Transactional email (crew shoot-day calendar invites sent at a producer's request) | European Union (EU region) | DPA; EU residency; SPF/DKIM/DMARC on slatewise.app; no marketing email |
Questions
For questions about our sub-processors or to request notification of changes, contact privacy@slatewise.app.