Subprocessors
Version 1.0. Last updated [DATE].
Current subprocessors
Etchplan uses the providers below to deliver the service. Each processes data only on our instructions and under a data processing agreement.
We give at least 30 days notice before adding a subprocessor that handles customer content.
| Provider | What it does | What it can see | Region |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account details, and all markups, measurements, calibrations and settings. PDF files only where cloud backup is switched on | Australia (Sydney) |
| Vercel | Application hosting and delivery | Request logs, IP addresses, and the approximate country header used once at signup | Global edge, processing in the region serving the request. Corporate entity in the United States |
| PostHog | Product analytics | Account identifier, pages viewed, features used. No drawing content, no markups, no measurements | European Union |
| Sentry | Error reporting | Stack traces, browser and operating system, the action that failed, account identifier | European Union (Germany) |
| Resend | Sign-in links and account notices | Email address, and the content of those messages | Ireland (eu-west-1) for sending. Resend's own account records, email metadata and logs stored in the United States |
Added when billing goes live
| Provider | What it does | What it can see |
|---|---|---|
| Stripe | Subscriptions, payments, invoices, tax | Name, email, billing address, ABN. Card details go directly to Stripe and are never held by us |
What no subprocessor receives
- Your PDF drawings, unless you have switched on cloud backup for that specific document, in which case only Supabase storage holds a copy.
- Your content, for training machine-learning models. No provider on this list is permitted to use it that way, and neither are we.