These are the providers that process personal data on behalf of Sporting Scouter, what they do, where they are and the safeguard used if data leaves the European Economic Area. The “Product” column shows which service each one applies to. Those that apply to Finisher Feedback are the subprocessors authorised in the Data Processing Agreement.
Last change to this list: 2026-10-21
| Entity | What it does | Data | Product | Location | Safeguard |
|---|---|---|---|---|---|
| Cloudflare, Inc. | Network, CDN and firewall; bot protection (Turnstile); app hosting; database, files and queues; AI classification of comments (Workers AI) | IP address and technical data of all visitors; public comments (without author); report and dispute files | All products, Social Debrief, Finisher Feedback | Global network | EU-U.S. Data Privacy Framework |
| DigitalOcean, LLC | Application server (API) | Data handled by the API | All products, Finisher Feedback | Frankfurt (EU) | Data hosted in the EU; EU-U.S. Data Privacy Framework |
| Supabase, Inc. | Database and sign-in | Accounts, companies, events, reviews, participants, invitations, consents | All products, Finisher Feedback | Frankfurt (EU) | Data hosted in the EU |
| Resend (Plus Five Five, Inc.) | Sending emails (invitations, confirmations, notices), through Amazon SES | Recipient email and name, email content, delivery events | Finisher Feedback, Reviews, Accounts | Ireland (EU) | EU-U.S. Data Privacy Framework |
| OpenAI Ireland Ltd. | Translation of reviews, responses and the analysis; notes when an organiser resolves an alert; help preparing business contacts | Title and text of reviews and responses (without the author's name or email); public business contacts | Reviews, Finisher Feedback, Business contacts | EU / US | Standard contractual clauses |
| Bright Data Ltd. | Collection of public comments and public event and organisation pages | Public web content | Social Debrief, Business contacts, Event catalogue | Israel | European Commission adequacy decision |
| Stripe | Payments | Buyer email and billing data; card data (Stripe only) | Accounts | US / EU | EU-U.S. Data Privacy Framework |
| PostHog, Inc. | Usage statistics and errors, cookieless | Pages viewed, visit source, clicks; in business, only an internal identifier | All products | EU | EU-U.S. Data Privacy Framework, for anything leaving the EU |
| Google LLC | Company email; Google sign-in (if you choose it); fonts in the reviews widget | Emails exchanged with us; Google account email and name; IP address of people who view the widget | All products, Accounts, Reviews widget | EU / US | EU-U.S. Data Privacy Framework |
| Termly, Inc. | Cookie banner (until replaced) | IP address, browser data, cookie choice | All products | US | EU-U.S. Data Privacy Framework |
| Anthropic Ireland, Limited | AI reading of public event pages for the event catalogue | Public event information; at most, organisers' public contact details | Event catalogue | EU / US | Standard contractual clauses |
| Anysphere, Inc. (Cursor) | Automated engineering tool that maintains the event catalogue | Public event information; at most, organisers' public contact details | Event catalogue | US | Standard contractual clauses |
| GitHub, Inc. | Code hosting and change records for the event catalogue | Public event information; at most, organisers' public contact details | Event catalogue | US | EU-U.S. Data Privacy Framework |
Changes and notice
- When we add or replace a Finisher Feedback subprocessor, we email customers at least 30 days in advance. You may object within that period; if we cannot agree, you may terminate the affected service and receive a pro-rata refund of what you paid for services not yet provided (Data Processing Agreement, §6.2).
- Every change is recorded on the Changes page.
- Questions: support@sportingscouter.com.