{"generatedAt":"2026-10-29T10:06:59.312Z","subprocessors":[{"name":"Cloudflare, Inc.","purpose":"Application hosting, database (D1), storage (R2), and transactional email delivery.","dataShared":["All application data - names, emails, leave records, time entries, audit logs"],"location":"D1 and R2 in the data region chosen at workspace sign-up (EU, US or Asia-Pacific) - D1 and R2 under the Cloudflare EU or US jurisdiction for EU and US workspaces and a location hint for Asia-Pacific workspaces, with D1 replication disabled in all three regions; a location hint is a placement preference, not a guarantee - plus Cloudflare's global network for processing (transfers under Cloudflare's DPA / SCCs)","dpaUrl":"https://www.cloudflare.com/cloudflare-customer-dpa/","optional":false},{"name":"Stripe, Inc.","purpose":"Subscription billing and payment processing for paid plans.","dataShared":["Billing admin name and email","Workspace (tenant) identifier"],"location":"United States (EU↔US transfers under Stripe's DPA / SCCs)","dpaUrl":"https://stripe.com/legal/dpa","optional":true},{"name":"Google LLC","purpose":"Optional Google sign-in (OAuth) and shared absence calendar synchronization for connected workspaces. Optional Google Workspace employee Out of office: Directory identity verification, Marketplace license checks, Calendar synchronization, and a Google Cloud Run token broker.","dataShared":["Account email and Google account identifier for authentication and Calendar connection","Employee names and approved absence dates for the shared calendar; leave type only when the administrator enables it","Shared calendar and managed event identifiers","Setup administrator and matched employee Google account emails and identifiers, Workspace customer identifiers, and Marketplace license status","Employee Out of office: approved full-day absence event times, timezones, event identifiers and generic content; no leave types or reasons","Opaque workspace, installation and target identifiers for the Google Cloud Run token broker"],"location":"Google Workspace and Google Cloud processing locations depend on provider and deployment configuration and may include the United States (transfers under applicable Google DPA / SCCs)","dpaUrl":"https://cloud.google.com/terms/data-processing-addendum","optional":true},{"name":"Microsoft Corporation","purpose":"Optional Microsoft Entra (Azure AD) sign-in (OAuth).","dataShared":["Account email address (for authentication only)"],"location":"United States (transfers under Microsoft's DPA / SCCs)","dpaUrl":"https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA","optional":true},{"name":"Functional Software, Inc. (Sentry)","purpose":"Client-side (in-browser) application error reporting.","dataShared":["Browser error stack traces and the app version","Workspace (tenant) identifier and the signed-in user's role - no name, email, or user id","The page route the error occurred on, with identifiers redacted"],"location":"European Union (Frankfurt) - Sentry EU data region","dpaUrl":"https://sentry.io/legal/dpa/","optional":true}]}