Subprocessor List
Last updated: 23 June 2026·Version: 1.0
1. About this list
This page lists the subprocessors engaged by MyCapsule AS (“MyCapsule”) to process personal data on behalf of our customers when delivering the MyCapsule platform.
This list forms part of our Data Processing Agreement (DPA). Customers are notified of changes in accordance with Section 7 of the DPA.
2. Current subprocessors
Supabase, Inc.
| Purpose | Database hosting, authentication, and application backend |
|---|---|
| Location | West EU (Ireland) |
| Data processed | All application data stored in the platform: account profiles, employee records, pulse responses, SMS logs, subscription references, audit logs |
| Website | https://supabase.com |
Stripe, Inc.
| Purpose | Payment processing and subscription billing |
|---|---|
| Location | United States / EU (Stripe infrastructure) |
| Data processed | Customer email, Stripe customer ID, subscription status, plan, seat quantity; payment card data handled directly by Stripe |
| Website | https://stripe.com |
Twilio, Inc.
| Purpose | SMS delivery for weekly pulse surveys and reminders (when enabled) |
|---|---|
| Location | United States / global delivery network |
| Data processed | Employee phone numbers, SMS message content including survey links, delivery status |
| Website | https://twilio.com |
Vercel, Inc.
| Purpose | Application hosting and deployment |
|---|---|
| Location | Global / EU edge network |
| Data processed | HTTP request metadata (IP address, user agent, timestamps) at infrastructure level |
| Website | https://vercel.com |
Google LLC
| Purpose | OAuth sign-in (via Supabase Auth); web font delivery (Google Fonts) |
|---|---|
| Location | United States / global |
| Data processed | Email and name via Google OAuth; IP address and browser data when fonts are loaded |
| Website | https://google.com |
3. Summary table
| Subprocessor | Function | Primary data | Region |
|---|---|---|---|
| Supabase, Inc. | Database hosting, authentication, and application backend | All application data stored in the platform: account profiles, employee records, pulse responses, SMS logs, subscription references, audit logs | West EU (Ireland) |
| Stripe, Inc. | Payment processing and subscription billing | Customer email, Stripe customer ID, subscription status, plan, seat quantity | United States / EU (Stripe infrastructure) |
| Twilio, Inc. | SMS delivery for weekly pulse surveys and reminders (when enabled) | Employee phone numbers, SMS message content including survey links, delivery status | United States / global delivery network |
| Vercel, Inc. | Application hosting and deployment | HTTP request metadata (IP address, user agent, timestamps) at infrastructure level | Global / EU edge network |
| Google LLC | OAuth sign-in (via Supabase Auth); web font delivery (Google Fonts) | Email and name via Google OAuth | United States / global |
4. What we do not use
As of 23 June 2026, MyCapsule does not use third-party analytics, advertising, or email marketing platforms that process personal data from the application.
Password reset and authentication emails are sent via Supabase Auth.
5. International transfers
Primary application data is stored in West EU (Ireland). Some subprocessors may process data outside the EEA. Where required, transfers are safeguarded by appropriate mechanisms such as the EU Standard Contractual Clauses (SCCs) or equivalent adequacy decisions.
6. Changes to this list
We will update this page when subprocessors are added or replaced. Material changes are communicated to customers at least 30 days before the new subprocessor processes customer data, in accordance with the DPA. Customers may object on reasonable grounds relating to data protection.
Subscribe to changes by bookmarking this page or contacting morten@mycapsule.eu.
7. Contact
MyCapsule AS
Gulaksvegen 31, 4345 Bryne, Norway
Email: morten@mycapsule.eu