# Subprocessors | Kardow

> The third parties Kardow uses to host and run job boards, what personal data each one handles, where, and how transfers are protected.

### In short

These are the companies that help Kardow run your board and may handle its users’ personal data. Under our [Data Processing Agreement](/dpa), we tell account owners before adding or replacing one, and you can object.

**DPF**: certified under the EU-U.S. Data Privacy Framework. **SCCs**: the European Commission’s standard contractual clauses, in the provider’s data processing terms.

Some providers only handle a board’s data when a feature that needs them is in use, such as AI features, a root custom domain or the mobile app.

| Provider | Purpose | Location | Safeguard |
| --- | --- | --- | --- |
| Amazon Web Services | Cloud infrastructure and email delivery | United States | DPF, SCCs |
| Supabase | Database and file storage | United States | SCCs |
| Cloudflare | Hosting, content delivery and security | Global network, United States | DPF, SCCs |
| Hetzner Online | Cloud hosting | United States | SCCs |
| Upstash | Cloud infrastructure | United States | SCCs |
| Resend | Email delivery | United States | DPF, SCCs |
| OpenAI | AI features | United States | SCCs |
| Anthropic | AI features | United States | SCCs |
| Groq | AI features | United States | SCCs |
| Vercel | AI features | United States | SCCs |
| Mapbox | Location services | United States | DPF, SCCs |
| Google | Location services | United States | DPF, SCCs |
| Sentry | Error monitoring | United States | DPF, SCCs |
| Tinybird | Analytics | United States | SCCs |
| SaaS Custom Domains | Custom domain hosting | United States | SCCs |
| Novu | Mobile app notifications | United States | SCCs |
| Expo | Mobile app notifications | United States | SCCs |

#### Services you connect yourself

Tools you add to your own board, such as your Stripe or PayPal account, Google or LinkedIn sign-in, Google Analytics, advertising pixels, Zapier, webhooks or your own email server, work under your own agreement with that provider. They are your providers, not Kardow’s subprocessors.

#### Kardow’s own business

The tools we use for our own website, billing and support (for example Stripe for your Kardow subscription and our support chat) handle your account details, not your board users’ data. Our [Privacy Policy](/privacy) covers them.

#### Changes and objections

We email account owners and update this page before a new subprocessor starts handling board data. To object, reply to that email or write to [support@kardow.com](mailto:support@kardow.com) within the notice period. Section 6 of the [DPA](/dpa) explains what happens next.