Subprocessors
Third-party vendors Eddy Works uses to deliver the service, their purpose, and data residency.
Confirmed production services only. Services planned but not yet active in production (such as OpenAI and Stripe) are excluded.
1. Current subprocessors
The following third-party vendors process data on behalf of Eddy Works to deliver the Service.
| Subprocessor | Vendor | Purpose | Data processed | Region |
|---|---|---|---|---|
| Authentication | Auth0 (Okta) | User login, signup, identity, and session management | User emails, credentials, login events | Australia |
| Background jobs | Inngest | Async processing, scheduled tasks, notifications | User IDs, session/stage IDs, event payloads | US |
| Database | DigitalOcean | All application data | All application data | Frankfurt, EU |
| Mailgun | Transactional notifications | Recipient emails, notification content | Frankfurt, EU | |
| Error monitoring | Sentry | Diagnostics and error tracking | Stack traces, request metadata, user IDs in error context | US |
| File storage | UploadThing (AWS S3) | Participant file uploads | Uploaded files, uploader user ID | EU |
| Hosting | Vercel | Application hosting and serverless functions | Request logs, serverless execution | Frankfurt, EU (fra1) |
| Product analytics | PostHog | Usage analytics and server-side events | User IDs, behavioural events, page views | EU |
| Realtime | Ably | Live session updates, presence, channel messages | User IDs, presence state, ephemeral channel messages | EU |
We will update this page when subprocessors are added, removed, or their configuration changes. If you have questions about a specific vendor, contact privacy@eddy.works.
2. Data Processing Agreements
Each subprocessor listed above has a Data Processing Agreement (or equivalent) in place with Eddy Works. Standard Contractual Clauses (SCCs) are used where required for transfers outside the EEA. Australia holds an adequacy decision from the European Commission.
3. Changes to this list
Customers who have signed a Data Processing Agreement with Eddy Works are entitled to object to new subprocessors. Notification of material changes will be made via email to the designated contact for the affected organisation.