Sub-processors
Annex A of the Data Processing Agreement. Property owners are told by email before a sub-processor is added or replaced, and may object within 14 days.
Last updated: 9 November 2026
| Sub-processor | Purpose | Data location | Transfer basis |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | EU, Germany (Frankfurt) | SCCs in the Supabase DPA |
| Railway Corporation | Application hosting | EU, Netherlands | SCCs in the Railway DPA |
| Raintank, Inc. dba Grafana Labs | Application monitoring (traces, metrics, logs). Technical IDs, routes and status codes only; no guest data. Kept 14 days. | EU, Germany | SCCs in the Grafana Labs DPA |
| Stripe Payments Europe, Ltd. | Subscription payments (staff billing data only) | EU (Ireland), with transfers to Stripe, Inc. | SCCs / EU-US Data Privacy Framework |
| Google (Google Maps Platform) | Maps on the guest portal and admin panel; the visitor's browser connects to Google | Global | SCCs / EU-US Data Privacy Framework |
| IPHost (iphost.gr) | Email hosting for guestsync.app (transactional and support email) | EU, Greece | Within the EEA |
Questions: support@guestsync.app