| Provider | Purpose | Region | DPA |
|---|---|---|---|
| Supabase | Database, auth, file storage | EU (eu-central-1, Frankfurt) | Link |
| Vercel | Web hosting + serverless functions | Global (CDN) | Link |
| Sentry | Error + performance monitoring | EU / US | Link |
| Resend | Transactional email delivery | EU / US | Link |
| hCaptcha | Bot mitigation on public forms | US | Link |
| PayMe | Payment processing and ITA tax invoices | Israel | Link |
| Apple App Store / Google Play | Mobile app distribution | Global | — |
Changes to this list will be announced 30 days in advance. Objection to a new subprocessor can be exercised by terminating the account.