SIMPLEVOTE LTD uses the subprocessors below to host and operate the SimpleVote platform. This list covers services that may process personal data on our instructions as processor, or as part of operating the service. Material changes will be notified to organisation Admins where practicable.
Voter and election email (magic links, reminders, results broadcasts, and related transactional messages) is sent through Resend.
Locations describe primary configuration. Edge delivery, support and recipient mail systems may involve other countries under applicable transfer safeguards. See the data-flow explanation.
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Vercel | Application hosting, edge delivery, and cookieless usage/performance analytics | Global network; configured application compute may use London | Vercel DPA and applicable transfer safeguards |
| Supabase | Database, election manager authentication, file storage | United Kingdom (eu-west-2, London) | Supabase DPA and applicable transfer safeguards |
| Resend | Outbound transactional email (voter magic links, reminders, results broadcasts, auth confirmation when configured via Supabase SMTP) | Ireland (eu-west-1) | EU (Ireland) processing; Resend DPA; UK–EU transfer safeguards as applicable |
| Stripe | Subscription billing and payment processing (Pro plan) | United States / EU (Stripe infrastructure) | Stripe DPA; UK-US Data Bridge and/or Standard Contractual Clauses |
| TidyCal | Optional demo-booking widget, loaded only after visitor action | United States | UK-US Data Bridge and/or Standard Contractual Clauses |
| Google / YouTube | Optional customer-supplied fonts and video embeds, loaded only when configured or activated | United States | Google API terms; may load from Google CDN when enabled |
Updates
We review subprocessors regularly. If you have questions about this list, contact info@simplevote.org.