Legal · Sub-processors

Sub-processors

Last updated: May 29, 2026

Workspace admins are notified by email at least 30 days before a new sub-processor that processes personal data is added. To subscribe as a non-admin, email support@sparqbox.com.

Who is on this list

This page lists the third parties that process personal data on behalf of Sparqbox customers (workspace data). Each is bound by a written data processing agreement that flows down the obligations in our Data Processing Agreement. International transfers rely on either the EU-US Data Privacy Framework where the recipient is certified, or the Standard Contractual Clauses (Commission Decision 2021/914).

For our role as controller (marketing-site visits, prospect data), additional tools are disclosed in our privacy policy.

Current sub-processors

Sub-processorPurposeData processedLocationTransfer mechanism
Supabase Inc.Database, auth, file storageAccount data, workspace content, attachmentsEU (Frankfurt)Within EEA
Render Services Inc.Backend hostingProcessed data in transitEU (Frankfurt)SCCs
Vercel Inc.Frontend hosting, edge deliveryRequest metadata, served contentGlobal edge, US HQSCCs + EU-US DPF
Anthropic PBCAI processing when enabledIdea content sent to the API; no training on customer dataUSSCCs + EU-US DPF
Resend Inc.Transactional and product emailRecipient email, email contentEU and USSCCs + EU-US DPF
Stripe Payments Europe Ltd.Payment processingBilling contact, payment method (card details never seen by Sparqbox)EU and USSCCs + EU-US DPF
Microsoft Corporation (Clarity)Marketing analytics (sparqbox.com / sparqbox.nl only)Visitor IP, page interactions, session replays — never workspace dataUSSCCs + EU-US DPF

Microsoft Clarity is listed here for transparency. It is scoped to our public marketing sites only and loads after explicit analytics consent in the cookie banner; it never touches customer workspace data.

Change notifications

Workspace admins are notified by email at least 30 days before we add a new sub-processor that processes personal data. To object on reasonable data-protection grounds, see Section 7 of our DPA. To subscribe to changes as a non-admin, email support@sparqbox.com.