Sub-processors
Last updated: July 14, 2026
Schedesk uses a small number of third-party companies ("sub-processors") to help us deliver the Service. Each sub-processor listed below processes customer data only on our documented instructions, only for the purpose described, and only to the extent necessary to perform its function.
Before engaging any sub-processor, we assess its security and privacy practices, and we enter into a written data processing agreement that imposes data protection obligations no less protective than those in our own agreement with you. This page is the authoritative, current list.
Current Sub-processors
| Sub-processor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Vercel Inc. | Application hosting and content delivery | All data submitted to the Service in transit, request metadata, IP addresses, application logs | European Union (Frankfurt, Germany), with a global edge network |
| Neon Inc. | Managed PostgreSQL database (primary data store) | All customer data: user profiles, desk and parking reservations, attendance, vacation requests, lunch orders, Slack workspace connection records | European Union (Frankfurt, Germany) |
| Upstash Inc. | Redis cache used for rate limiting and abuse prevention | Transient rate-limiting counters keyed by IP address or account identifier; no persistent customer records | European Union (Frankfurt, Germany) |
| Slack Technologies, LLC (Salesforce) | Slack workspace integration, if enabled by your administrator | Slack user and workspace identifiers, and the content of messages and notifications Schedesk sends to your workspace | United States |
| Google LLC | Optional "Sign in with Google" authentication, and reCAPTCHA bot protection on sign-up and login | Email address and basic profile for OAuth sign-in; IP address and browser signals for reCAPTCHA | United States and global infrastructure |
| Resend, Inc. | Transactional email delivery (invitations, password resets, security alerts, notifications) | Recipient name and email address, and the content of the transactional email | United States (email delivery infrastructure) |
| Postbud | Email marketing and product update announcements | Name and email address provided at sign-up | European Union |
International Data Transfers
Customer data is stored at rest within the European Union. Some sub-processors listed above are established in the United States. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission and, where applicable, the vendor's certification under the EU-U.S. Data Privacy Framework.
No Sale of Data
We do not sell customer data, and we do not share it with advertising networks or data brokers. Sub-processors act on our instructions only and may not use customer data for their own purposes.
Changes to This List
We update this page whenever we add or replace a sub-processor. Customers with an active subscription may request to be notified in advance of changes by contacting us, and may object to a new sub-processor on reasonable data protection grounds.
Questions
For questions about our sub-processors, or to request a data processing agreement, contact us at contact@schedesk.com.