Subprocessors

Cloudflare R2

Encrypted managed backup objects and object metadataBackup objects stay in Cloudflare R2's EU jurisdiction with no non-EU storage option. Cloudflare's data processing addendum and EU Standard Contractual Clauses cover authorised access from outside the EEA.

Railway

Application hosting, operational logs, app database and isolated backup-verification databaseReviveDB's production API, workers, application database and isolated verification database are deployed in Railway's EU West region in Amsterdam. Database contents are processed there while a dump is created and restore-tested; the verification copy is removed at the end of the run. Railway is US-based. Our signed data processing addendum includes EU Standard Contractual Clauses and the UK Addendum for applicable access or transfers outside the EEA and UK.

Resend

Sign-in and operational email deliveryResend handles sign-in and operational email only. It receives the recipient address, sender, subject, message body and delivery metadata, not database or Storage backup contents. Email is dispatched from Ireland; email and log data is kept for 30 days in the United States, with backup copies for a further seven days. Resend's data processing addendum is in force for every account and includes the processor-to-processor EU Standard Contractual Clauses and the UK Addendum.

Vercel

Frontend hosting and cookieless analytics on public pages; query strings are removed before analytics events are sentVercel is US-based and its primary processing takes place in the United States: its data processing addendum applies automatically, with EU standard contractual clauses covering the transfer.

PostHog

Cookieless, pseudonymous server-side lifecycle events and a browser survey that loads only when you open FeedbackEU Cloud hosting (Frankfurt). Provider is US-based: EU standard contractual clauses and Data Privacy Framework apply.

Sentry

Backend error monitoring and operational alerts with request, user, payload, credential and backup-content collection disabledService data is stored in Sentry's selected European Union location for 30 days. Sentry is US-based and its data processing addendum uses the Data Privacy Framework and Standard Contractual Clauses for applicable access or transfers outside the EEA.

Stripe

Billing identity, subscription state and payment method; Stripe holds card data and ReviveDB does not store itStripe determines processing location. Its data processing addendum incorporates EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. ReviveDB never stores card data.

Google

Optional Google sign-in and verified account emailGoogle processes optional sign-in under its published privacy and transfer terms. No customer backup contents or project credentials are sent to Google.

Sanity

Public website and blog content deliverySanity serves public website and blog content only. No customer account data, project credentials or backup contents are sent to Sanity.

Better Stack

External uptime monitoring of the public health endpoints; the monitored responses contain component status only, no account, project or backup dataOnly component status from public health endpoints is monitored; no account, project, credential or backup data is included. Better Stack's DPA uses the Data Privacy Framework and Standard Contractual Clauses for applicable transfers.

We provide advance notice of material subprocessor changes. Questions or objections can be submitted through our contact page.