Legal
Subprocessors
Last updated July 2026
What this page covers
- Every third party that can touch your data, and exactly what each one receives.
- What we deliberately do not use, including any external AI service.
- How we tell you when this list changes.
About 3 minutes to read.
The complete list
These are every third party that touches customer data on our behalf. Not a representative sample: the whole list.
| Service | What it does | What it receives | Role |
|---|---|---|---|
| Vercel | Runs the application, and provides first-party, cookieless Web Analytics (page views). | Request traffic in transit, including your IP at the network layer. Its analytics are cookieless and set nothing on your device. | Hosting and analytics |
| Supabase | Hosts the Postgres database, where everything is stored. | People, schedules, punches, timesheets, clock-in photos, the audit trail. We use it as a database only, not its auth, file storage, or data API. | Database host |
| Resend | Delivers our email: sign-in links, invitations, reminders, notifications. | The recipient's email address and the message content, which includes their first name and, for sign-in mail, a single-use link. | Email delivery |
| Stripe | Takes payment for paid plans, stores the card, and calculates tax at checkout. | Your name, email, billing address and card details, plus the plan and seat count being billed. Card details go to Stripe directly and are never seen or stored by us. | Payment processing |
| Sentry | Receives a report when the application hits an error, so we find faults before you have to tell us. | The error and its stack trace. Configured to attach no IP addresses, request headers, or cookies, with no session recording. | Error monitoring |
| Powers the optional Sign in with Google. | Your email address and name, only if you choose Google sign-in. Sign in with an email link instead and Google receives nothing. | Sign-in (optional) | |
| Google Analytics | Optional website analytics, and only after you accept the cookie banner. | Page-view data sent to Google, with every advertising signal off and your IP anonymised. Decline the banner and it never loads. | Analytics (opt-in) |
What we do not use
Beyond the consent-gated Google Analytics and Vercel's first-party analytics listed above, there is no advertising network, no customer-support chat widget, no CRM, no data warehouse, and no external AI service. The coverage agent that ranks and fills shifts runs on our own servers, so nothing your team types into the product is sent to a language model, and none of your data is used to train one.
Changes to this list
If we add a subprocessor we will update this page and tell account admins. Customers who need advance notice, or a data processing agreement, should write to us.
Contact
Questions about subprocessors or a data processing agreement: privacy@formclock.com.