Sub-Processor List

Last updated: May 29, 2026

EquaSched uses the following third-party sub-processors to deliver the Service. All sub-processors are bound by data processing agreements consistent with applicable privacy law, including CCPA and relevant US state privacy statutes. We will notify customers at least 10 business days before adding a new sub-processor that handles personal data.

SupabaseAdded 2026-01-01

Database (PostgreSQL), authentication, and row-level-security storage for all scheduling, staff, and clinic data.

Data location: United States (AWS us-east-1)Supabase Privacy & DPA
VercelAdded 2026-01-01

Frontend hosting, CDN, and serverless edge functions for the EquaSched web application.

Data location: United States (primary); CDN edge nodes globallyVercel Privacy Policy
ResendAdded 2026-01-01

Transactional email delivery — schedule notifications, swap approvals, and billing reminders sent to clinic staff and managers.

Data location: United StatesResend Privacy Policy
PaddleAdded 2026-01-01

Payment processing, subscription billing, and invoicing. Acts as Merchant of Record for EquaSched subscriptions.

Data location: United Kingdom / United StatesPaddle Privacy Policy

DPA Requests

To request a copy of EquaSched's Data Processing Agreement or ask questions about sub-processor data flows, email privacy@equasched.com.

Return to Privacy Policy or Data Processing Agreement.