Sub-processors
Last updated: November 2025
ClearBook engages carefully vetted sub-processors to deliver the platform. Each organization below processes personal data on behalf of tenants under GDPR-compliant contracts, security reviews, and confidentiality obligations.
Current sub-processors
| Name | Service provided | Region | Personal data processed |
|---|---|---|---|
| Vercel, Inc. Update if hosting provider or primary region changes. | Application hosting, CDN, build pipeline | Primary region: Frankfurt, Germany (global CDN PoPs) | Application metadata, deployment artifacts, access logs generated by tenant usage |
| MongoDB Atlas (MongoDB, Inc.) | Managed database hosting | Frankfurt, Germany (with encrypted backups) | Production databases containing tenant records (bookings, services, staff, audit logs) |
| Upstash, Inc. | Managed Redis cache & rate limiting | Frankfurt, Germany | Ephemeral cache entries for availability lookups and API throttling |
| Resend, Inc. | Transactional email delivery | EU & USA (regional sending infrastructure) | Recipient email addresses, notification content, template metadata |
| Stripe Payments Europe, Ltd. | Payment processing & payouts | EU & USA (card networks) | Payment tokens, billing contact information when tenants enable online payments |
Change notifications
We provide at least 30 days’ notice before onboarding a new sub-processor or making a material change to the list above, except when emergency replacements are required to maintain service continuity. Tenants may subscribe to change notifications via legal@clearbook.dev.