Sub-processors
Last updated: 16 September 2026
Venues are notified of changes under paragraph 3.2 of Schedule 1 of the Terms & Conditions.
| Provider | Purpose | Data location | Transfer safeguard |
|---|---|---|---|
| Stripe Payments UK Ltd / Stripe, Inc. | Payment processing, payouts, subscription billing | United States and EU (Stripe Payments UK Ltd is the UK contracting entity) | UK Addendum to the SCCs in Stripe's data processing terms |
| Supabase, Inc. | Database, real-time order feed, storage | United Kingdom (London) | Data at rest in the UK |
| Vercel, Inc. | Application hosting and edge network | United Kingdom (London) for server functions; global edge network for static assets | Vercel DPA incorporating SCCs / UK Addendum |
| Clerk, Inc. | Venue authentication and account security | United States | UK Addendum to the SCCs in Clerk's data processing terms |
| Resend, Inc. | Transactional email (order and account notifications) | EU (Ireland) | Data processed in the EU under Resend's data processing terms |
| Cloudflare, Inc. | DNS, bot protection (Turnstile), email routing for support mailbox | Global network (DNS, Turnstile, email routing) | Cloudflare DPA incorporating SCCs / UK Addendum |
- Stripe Payments UK Ltd / Stripe, Inc.
- Purpose
- Payment processing, payouts, subscription billing
- Data location
- United States and EU (Stripe Payments UK Ltd is the UK contracting entity)
- Transfer safeguard
- UK Addendum to the SCCs in Stripe's data processing terms
- Supabase, Inc.
- Purpose
- Database, real-time order feed, storage
- Data location
- United Kingdom (London)
- Transfer safeguard
- Data at rest in the UK
- Vercel, Inc.
- Purpose
- Application hosting and edge network
- Data location
- United Kingdom (London) for server functions; global edge network for static assets
- Transfer safeguard
- Vercel DPA incorporating SCCs / UK Addendum
- Clerk, Inc.
- Purpose
- Venue authentication and account security
- Data location
- United States
- Transfer safeguard
- UK Addendum to the SCCs in Clerk's data processing terms
- Resend, Inc.
- Purpose
- Transactional email (order and account notifications)
- Data location
- EU (Ireland)
- Transfer safeguard
- Data processed in the EU under Resend's data processing terms
- Cloudflare, Inc.
- Purpose
- DNS, bot protection (Turnstile), email routing for support mailbox
- Data location
- Global network (DNS, Turnstile, email routing)
- Transfer safeguard
- Cloudflare DPA incorporating SCCs / UK Addendum