Last updated 3 May 2026
Sub-processors
We engage the following sub-processors to deliver the service. We notify customers by email at least 30 days before adding or replacing a sub-processor.
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. | Managed Postgres, Auth, Storage | EU (Frankfurt) | Standard contractual clauses + UK Addendum |
| Vercel Inc. | Application hosting & edge network | UK (London) + EU | Standard contractual clauses + UK Addendum |
| Twilio Inc. | SMS & WhatsApp messaging | UK / EU | Standard contractual clauses + UK Addendum |
| Resend Inc. | Transactional email delivery | EU | Standard contractual clauses + UK Addendum |
| Anthropic PBC | AI assistant + voice transcription | EU residency option used | Standard contractual clauses + UK Addendum |
| Stripe Payments UK Ltd | Subscription billing | UK | N/A (UK-domiciled) |
| Cloudflare UK Ltd | WAF, DDoS, DNS | UK | N/A (UK-domiciled) |
To object to a sub-processor change, email dpo@careloop.com within 14 days of notification. We’ll work with you to find an alternative or terminate without penalty.