These are the companies that process personal data on our behalf to run KitCompliance. Our privacy policy explains what we collect and why. We'll update this page before we add or replace a subprocessor that handles customer data.
| Provider | What for | Data involved | Used |
|---|---|---|---|
| Railway | Application hosting, database and file storage — servers in the EU (Amsterdam, Netherlands) | All account and workplace records, uploaded photos | Always |
| Stripe | Payments and subscriptions | Billing name, email, payment details (held by Stripe, not us) | Paid plans |
| Resend | Sending email | Recipient email address and the message content (reminders, password resets, support replies) | Always |
| "Sign in with Google" | Name, email, Google account ID | Only if you choose it | |
| Sentry | Error monitoring | Technical error details, which may include a user ID | When enabled |
| Twilio | SMS alerts | Phone number and alert text | Only if SMS alerts are set up |
International transfers
Your records are hosted in the EU, which the UK recognises as giving adequate protection. Some of the other providers process data outside the UK and EU. Where they do, we rely on the safeguards each provider offers under UK GDPR (such as UK adequacy regulations or the International Data Transfer Addendum). Ask us if you need the details for your own records.