SIMPLEVOTE LTD uses the subprocessors below to host and operate the SimpleVote platform. This list covers services that may process personal data on our instructions as processor, or as part of operating the service. Material changes will be notified to organisation Admins where practicable.
Voter and election email (magic links, reminders, results broadcasts, and related transactional messages) is sent exclusively via Resend. It is not sent through Google Workspace or Cloudflare.
Business email for SIMPLEVOTE LTD staff (e.g. admin@simplevote.org) uses Google Workspace and is separate from the product email pipeline.
Supabase Auth confirmation emails use Resend as custom SMTP when configured in the Supabase project.
DMARC is not currently published for simplevote.org.
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Vercel | Application hosting and edge delivery (serverless functions) | United Kingdom (eu-west-2, London) | UK/EU-region processing; Vercel DPA |
| Supabase | Database, election manager authentication, file storage | United Kingdom (eu-west-2, London) | UK/EU-region processing; Supabase DPA |
| Resend | Outbound transactional email (voter magic links, reminders, results broadcasts, auth confirmation when configured via Supabase SMTP) | Ireland (eu-west-1) | EU (Ireland) processing; Resend DPA; UK–EU transfer safeguards as applicable |
| Stripe | Subscription billing and payment processing (Pro plan) | United States / EU (Stripe infrastructure) | Stripe DPA; UK-US Data Bridge and/or Standard Contractual Clauses |
| TidyCal | Demo booking scheduling (sales enquiries only) | United States | UK-US Data Bridge and/or Standard Contractual Clauses |
| Google Fonts (Google) | Optional org branding: web fonts loaded on voter ballot pages when configured (Enterprise) | United States | Google API terms; may load from Google CDN when enabled |
Updates
We review subprocessors regularly. If you have questions about this list, contact admin@simplevote.org.