Sub-processors
The providers we use to run TimeSpan. This page is Annex 3 to the Data Processing Agreement.
Last updated: 7 August 2026 · Africa Procurement Group Ltd
We give 30 days' notice before adding or replacing a sub-processor, and you may object on reasonable data protection grounds — see clause 3 of the DPA. To be notified of changes, email privacy@timespan.online asking to join the sub-processor notification list.
Current sub-processors
| Provider | Purpose | Processing location |
|---|---|---|
| Supabase | Database, authentication and file storage — the primary store for Customer Data | United Kingdom / EU (project region) |
| Vercel | Application hosting, edge delivery and serverless execution | EU / global edge |
| Stripe | Payment processing and subscription billing | EU / USA |
| Anthropic | AI model powering Copilot answers. Prompts are not used for model training | USA |
| Google Maps Platform | Distance, travel time and geocoding for routing solvers | USA / global |
| Resend | Transactional and notification email | EU / USA |
| Sentry | Application error monitoring and alerting | EU region |
| Cloudflare | Encrypted off-site backup storage (R2) | EU / global |
| GitHub | Private source control and scheduled backup automation | USA |
Each sub-processor is engaged under a written contract imposing data protection obligations no less protective than our DPA, and we remain liable to you for their performance. Transfers outside the UK or EEA rely on the safeguards described in clause 4 of the DPA.
Africa Procurement Group Ltd is a company registered in England and Wales under number 10553435, with its registered office at Devonshire House, One Mayfair Place, London, England, W1J 8AJ. Questions about this document: legal@timespan.online.