Skip to main content

Odybook Subprocessors

Version dated October 8, 2026

How to read this list

This page distinguishes necessary suppliers, suppliers enabled by configuration and suppliers only possible in code. Locations were checked in production on October 8, 2026.

Main suppliers

  • Vercel Inc. (United States): application hosting in the Paris region (France), global content delivery and request routing, technical logs. Address: 440 N Barranca Avenue #4133, Covina, CA 91723, United States. DMCA legal phone: +1 559 288 7060. Safeguards: EU-U.S. Data Privacy Framework and standard contractual clauses.
  • Supabase Pte. Ltd (Singapore): database, authentication and file storage, hosted in Frankfurt (Germany). Safeguards: standard contractual clauses.
  • Stripe Payments Europe Ltd and applicable Stripe entities: payments, subscriptions, Connect, billing and fraud prevention.
  • Resend Inc. (United States): transactional email, sent from the Ireland region.
  • Upstash Inc. (United States): temporary sign-in codes, cache and abuse limits, hosted in Frankfurt (Germany).
  • Functional Software Inc. / Sentry GmbH: technical error tracking and application stability (data hosted in the EU / DPF and SCC safeguards).
  • OpenAI, L.L.C. (United States): AI assistance for descriptions, articles and guide cheat sheets when the AI features are used; guest preferences are minimized before sending. Transfer outside the EU under OpenAI's data processing addendum.
  • Cloudflare, Inc.: storage of encrypted database backups (Cloudflare R2).
  • GitHub, Inc. (United States): runs the automated backup job; the database copy passes through its job runners before encryption.

Optional suppliers

  • Google LLC: Google Calendar synchronization if the Client connects an account.
  • Google Analytics, Vercel Analytics or another measurement tool: only if enabled and under applicable cookie choices.
  • Configurable AI suppliers: content or support assistance, only when the feature is enabled and with data minimization.

Changes

SYNSETIO updates this list when adding or replacing a supplier with a significant role. Clients may request details and raise a reasoned objection under the DPA.