Sub-processors
Last updated: October 2, 2026
EasyDash ApS uses the companies below to run the Service. Each one processes customer data only to provide its part of the Service, under a written agreement with data protection terms at least as protective as our Data Processing Agreement. Your account and dashboard data is stored in the European Economic Area. Email content is the exception, as the Resend row below explains.
Supabase, Inc.
What they do for us
Database, file storage and sign-in
Data they touch
All customer data
Where the data is processed
Ireland (EU), AWS eu-west-1
Transfer safeguard
Stored in the EU. Standard Contractual Clauses in Supabase’s DPA cover support access from outside the EU.
Railway Corporation
What they do for us
Processes files and syncs connected sheets
Data they touch
All customer data, in transit through processing
Where the data is processed
The Netherlands (EU), Google Cloud europe-west4
Transfer safeguard
Processed in the EU. Railway is a US company; Standard Contractual Clauses in Railway’s DPA.
Vercel Inc.
What they do for us
Hosts the web application and its server functions
Data they touch
Customer data shown in dashboards and passed through server functions
Where the data is processed
Ireland (EU), region dub1. Pages are delivered through Vercel’s global network.
Transfer safeguard
EU–US Data Privacy Framework, and Standard Contractual Clauses in Vercel’s DPA.
OpenAI
What they do for us
Suggests dashboard layouts from a description of your columns
Data they touch
Column descriptions and a few example labels. Never the rows.
Where the data is processed
United States
Transfer safeguard
Standard Contractual Clauses in OpenAI’s Data Processing Addendum.
Resend (Plus Five Five, Inc.)
What they do for us
Sends account and notification emails, receives the emails you send to our support addresses, and sends our replies
Data they touch
Recipient names and email addresses, and dashboard names in email content. For support mail: the full message you send to support@, hello@ or privacy@easydash.app, including your name, email address, subject, message text and attachments, and the replies we send you
Where the data is processed
Emails are sent from the EU (eu-west-1). Email content, including support mail we receive, and delivery logs are stored in the United States for 30 days. Account records are also stored there.
Transfer safeguard
EU–US Data Privacy Framework, and Standard Contractual Clauses in Resend’s DPA.
PostHog, Inc.
What they do for us
Product analytics, only with your consent
Data they touch
Usage events and technical data of people who consent. Never dashboard contents.
Where the data is processed
Germany (EU), PostHog EU Cloud
Transfer safeguard
Processed in the EU.
Google and GitHub are not on this list. You choose to connect them with your own account, and we receive data from them; they don’t process your data for us. Stripe handles payments with us as the controller, as described in our Privacy Policy.
We will tell account owners by email at least 30 days before we add or replace a sub-processor, and update this page at the same time. If you object on reasonable data protection grounds, tell us at privacy@easydash.app within that period. If we can’t resolve it, you can end the affected service and get a pro-rata refund of anything prepaid.
Questions: privacy@easydash.app.