Last updated: 6 May 2026 · Operator: Proofen B.V., Rotterdam, Netherlands
This page lists every third-party service that processes customer data on behalf of ITADpricing. We update it any time we add, remove or change a subprocessor. If you require advance notice of changes (e.g. for your own GDPR vendor list), email hello@itadpricing.comand we'll add you to the change-notification list.
Each subprocessor below has either signed a Data Processing Addendum (DPA) with us or operates under their own published DPA that we accept as equivalent. Customer data leaves the EU only via EU–US Standard Contractual Clauses (SCCs).
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Vercel Inc. | Web application hosting, edge network, observability | Browser session metadata, request logs, IP addresses | USA / EU edge nodes |
| Supabase Inc. | Database, authentication, file storage | Account email, hashed passwords, profile data, watchlist data | EU (Frankfurt, eu-central-1) |
| Stripe Payments Europe Ltd. | Payment processing, subscription billing, invoicing | Billing email, last 4 digits of card, billing address, transaction history | Ireland |
| Resend Inc. | Transactional email delivery (welcome, alerts, billing receipts) | Email address, email content, delivery logs | USA (with EU SCCs in place) |
| Plausible Insights OÜ | Privacy-friendly web analytics — page views, button clicks, conversion events | Anonymised browser metadata. No cookies, no personal identifiers, no IP addresses retained. | EU (Estonia) |
| Google Workspace (Workspace Account Holders) | Customer support email inbox at hello@itadpricing.com | Email content for support conversations, sender email address | Ireland (EU) |
Customer account data lives in the EU (Supabase Frankfurt). Payment data is processed by Stripe Ireland. Email delivery uses Resend (USA, with SCCs). Web analytics use Plausible (EU). All other subprocessors are listed above.
Email hello@itadpricing.com with subject “DPA request” and your company name. We send our standard DPA within 2 working days. For enterprise contracts, we accept your DPA template and counter-sign within 5 working days.
Send an email with the subject “Subprocessor notifications” and we'll add you to the list. You'll get 30 days advance notice before any new subprocessor is added or any region changes.