List of Subprocessors
Overview of the further processors (subprocessors) engaged by the Provider pursuant to Art. 28 paragraph 4 GDPR and § 5 of the Data Processing Agreement.
As of August 2026
This list is Annex 1 to the Data Processing Agreement (DPA) and is updated on a continuous basis. Changes will be announced at least four weeks before they take effect, in text form.
| # | Subprocessor | Address | Purpose | Processing Location | Third Country | Safeguard |
|---|---|---|---|---|---|---|
| 1 | Supabase Pte. Ltd. | 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 | Database, authentication, file storage, realtime, and edge functions; currently also delivery of sign-in and password emails | Frankfurt am Main (Germany) | No | Not required, processing within the EU |
| 2 | Journey Mobile, Inc. (PowerSync Cloud) | Denver, Colorado, USA | Synchronization of inspection data to mobile devices | EU | No | Not required, processing within the EU |
| 3 | Google Cloud EMEA Limited (Google Cloud Run) | 70 Sir John Rogerson's Quay, Dublin 2, Ireland | Operation of the application servers of the website and the web app | Belgium | No | Not required, processing within the EU |
| 4 | Google Cloud EMEA Limited (Google Vertex AI) | 70 Sir John Rogerson's Quay, Dublin 2, Ireland | AI processing of import documents and text suggestions | Frankfurt am Main (Germany) | No | Not required, processing within the EU |
| 5 | Functional Software, Inc. d/b/a Sentry | 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Error diagnostics, session replay, and error reports | EU | No | Not required, processing within the EU |
Most of the listed providers are established outside the European Union: Supabase in Singapore, Journey Mobile and Functional Software in the USA. Google Cloud EMEA Limited is established in Ireland and belongs to a parent company in the USA. Processing takes place exclusively within the EU; access from a third country is not agreed. Should a transfer to a third country become necessary in an individual case, it is based on the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
For questions about the subprocessors list or data protection topics in general, please contact us at the address provided in the DPA.