Overview
LSC EUROPA Ltd. uses the sub-processors below to provide Repost. This page identifies third-party providers that may process personal data for Repost; it does not list every internal software component, database, queue, index, or implementation detail. Transfer safeguards are described at a summary level and may be updated as providers or processing locations change.
Optional identity providers
Google and GitHub may process account-login data when a user chooses to sign in to Repost through that provider. These providers are user-authorized identity providers for account creation, authentication, and account linking. They are not used by Repost to process customer webhook payloads and are not listed in the sub-processor table for customer payload processing.
Current list
| Sub-processor | Purpose | Data | Location | Transfer note |
|---|---|---|---|---|
| Stripe Payments Europe, Limited | Payments and billing | Billing and contact data | United States / Ireland | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Google Cloud EMEA Limited | Cloud infrastructure, compute, cache, and object storage | Customer data processed by hosted infrastructure, including event and payload data where applicable | United States, us-central1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Vercel Inc. | Marketing website and dashboard application hosting | Website visitor data | United States | DPF, SCCs, or other lawful transfer mechanism as applicable |
| PostHog, Inc. | Website and product analytics, session replay, and error tracking | Pseudonymous usage data such as page URL, referrer, browser and device statistics, approximate location, campaign parameters, and product events; with analytics consent, session identifiers and masked session recordings; no customer webhook payloads | European Union, Frankfurt (PostHog Cloud EU), with provider support access as applicable | EU processing, DPF, SCCs, or other lawful transfer mechanism as applicable |
| Cloudflare, Inc. | CDN, DNS, security, media delivery, and Turnstile bot protection on authentication, account-recovery, and temporary-bucket entry flows | Request metadata, hosted media assets, and security challenge signals such as IP address, user-agent, TLS or browser signals, sitekey, origin, and challenge outcome | United States / global edge | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Plus Five Five, Inc. | Transactional email | Recipient email and message content | United States | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Crisp IM SAS | Live chat support | Support-chat data | France, with support access and onward sub-processors as applicable | EU processing, DPF, SCCs, or other lawful transfer mechanism as applicable |
| Neon, LLC | Managed database for service metadata | Service metadata needed to operate customer-facing features; no customer payloads | United States, aws-us-east-2 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Timescale, Inc. | Managed operational database | Event and payload data | United States, us-east-1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| StreamNative, Inc. | Managed event queue and message broker | In-transit event data | United States, us-central1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Mistral AI | AI-assisted autocomplete in search and transformer editors | Text around the editor cursor and relevant editor context. Signed-in workspace context may include webhook field values or sample input. Temporary buckets remove observed values, sample values, and secret names before transfer. | France and other locations used by the provider or its sub-processors | EU processing, SCCs, or other lawful transfer mechanism as applicable |
Changes and objections
Repost will provide a change-notification mechanism for material sub-processor changes. Customers may object where the Data Processing Agreement or mandatory law gives an objection right. If an objection cannot be resolved, termination rights may apply.