Trust Centre
Subprocessors and data flow
Primary election data is stored in the UK. Application requests pass through Vercel; transactional messages are sent via Resend to recipients' mail providers. Edge delivery, support and optional services may process data in other locations under applicable transfer safeguards.
| Provider | Purpose | Location context | Safeguard |
|---|---|---|---|
| Vercel | Application hosting, edge delivery, and cookieless usage/performance analytics | Global network; configured application compute may use London | Vercel DPA and applicable transfer safeguards |
| Supabase | Database, election manager authentication, file storage | United Kingdom (eu-west-2, London) | Supabase DPA and applicable transfer safeguards |
| Resend | Outbound transactional email (voter magic links, reminders, results broadcasts, auth confirmation when configured via Supabase SMTP) | Ireland (eu-west-1) | EU (Ireland) processing; Resend DPA; UK–EU transfer safeguards as applicable |
| Stripe | Subscription billing and payment processing (Pro plan) | United States / EU (Stripe infrastructure) | Stripe DPA; UK-US Data Bridge and/or Standard Contractual Clauses |
| TidyCal | Optional demo-booking widget, loaded only after visitor action | United States | UK-US Data Bridge and/or Standard Contractual Clauses |
| Google / YouTube | Optional customer-supplied fonts and video embeds, loaded only when configured or activated | United States | Google API terms; may load from Google CDN when enabled |
Optional and separate flows
- Stripe receives payment and billing data when paid checkout is used; SimpleVote does not store full card numbers.
- TidyCal loads only when a visitor chooses to open the booking widget.
- YouTube loads only when a visitor chooses to play an embedded video.
- Customer-configured remote fonts can disclose a request to the font host; customers should prefer approved/self-hosted assets.
Change notices
Organisation administrators can subscribe to advance notice of material subprocessor changes. Objections on reasonable data-protection grounds may be raised by replying to a notice within the stated period.
The contractual list remains at /legal/subprocessors.