Overview
LSC EUROPA Ltd. uses the sub-processors below to provide Repost. This page identifies third-party providers that may process personal data for Repost; it does not list every internal software component, database, queue, index, or implementation detail. Transfer safeguards are described at a summary level and may be updated as providers or processing locations change.
Optional identity providers
Google and GitHub may process account-login data when a user chooses to sign in to Repost through that provider. These providers are user-authorized identity providers for account creation, authentication, and account linking. They are not used by Repost to process customer webhook payloads and are not listed in the sub-processor table for customer payload processing.
Current list
| Sub-processor | Purpose | Data | Location | Transfer note |
|---|---|---|---|---|
| Stripe Payments Europe, Limited | Payments and billing | Billing and contact data | United States / Ireland | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Google Cloud EMEA Limited | Cloud infrastructure, compute, cache, and object storage | Customer data processed by hosted infrastructure, including event and payload data where applicable | United States, us-central1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Vercel Inc. | Marketing website hosting | Website visitor data | United States | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Cloudflare, Inc. | CDN, DNS, security, media delivery, and Turnstile bot protection on authentication and account-recovery flows | Request metadata, hosted media assets, and security challenge signals such as IP address, user-agent, TLS or browser signals, sitekey, origin, and challenge outcome | United States / global edge | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Plus Five Five, Inc. | Transactional email | Recipient email and message content | United States | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Crisp IM SAS | Live chat support | Support-chat data | France, with support access and onward sub-processors as applicable | EU processing, DPF, SCCs, or other lawful transfer mechanism as applicable |
| Neon, LLC | Managed database for service metadata | Service metadata needed to operate customer-facing features; no customer payloads | United States, aws-us-east-2 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| Timescale, Inc. | Managed operational database | Event and payload data | United States, us-east-1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
| StreamNative, Inc. | Managed event queue and message broker | In-transit event data | United States, us-central1 | DPF, SCCs, or other lawful transfer mechanism as applicable |
Changes and objections
Repost will provide a change-notification mechanism for material sub-processor changes. Customers may object where the Data Processing Agreement or mandatory law gives an objection right. If an objection cannot be resolved, termination rights may apply.