Last updated 23 October 2026
Sub-processors
These are the service providers that may process personal data for Slipmark Cloud. This page forms part of our Data Processing Agreement.
Current sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc | Database and server functions | Hosted on AWS in London (eu-west-2) |
| Vercel Inc | Web hosting and serverless functions | Functions run in London (lhr1); pages are delivered through a global edge network |
| Stripe Payments Europe Ltd and Stripe Inc | Payments and billing | EU and US |
| GitHub Inc | Source of repository data, through the GitHub App you install | US |
| Resend Inc | Sending alert emails, only if you add an email destination | US |
| Slack Technologies | Alerts, only if you connect Slack | US and EU |
Listed for transparency
1.
Sigstore Rekor public transparency log (Linux Foundation and OpenSSF). Each day we publish a signed digest of ledger heads to this public log. It receives only hashes and opaque identifiers, and no personal data, so it is not a sub-processor. We list it so you know where the digest goes.
Transfers outside the UK
2.
Where a provider processes personal data outside the UK, we rely on UK adequacy regulations where they apply, including the UK Extension to the EU-US Data Privacy Framework for certified US recipients. Otherwise we use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Changes to this list
3.
We will give at least 30 days' notice before adding a new sub-processor, by updating this page. Customers on the Business plan will also get an email to their billing contacts.
4.
You may object to a new sub-processor by emailing hello@replyintelligencegroup.co.uk within the notice period. Clause 7 of the Data Processing Agreement explains what happens next.