This is the same list as the Security & trust page and section 5 of the Privacy Policy.
| Name | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| Vercel, Inc. | Website and app hosting, edge delivery, logs | US / EU | EU-U.S. DPF; SCCs as contractual fallback |
| MongoDB Atlas | App database (accounts, BOMs, usage, audit logs, cache) | EU region | Not applicable (EEA) |
| Stripe, Inc. | Payment processing | US | EU-U.S. DPF; SCCs as contractual fallback |
| Google LLC | Google OAuth sign-in | US | EU-U.S. DPF; SCCs as contractual fallback |
| GoHighLevel / LeadConnector (HighLevel, Inc.) | CRM, contact enquiries, demo booking, live chat, transactional notifications | US | EU-U.S. DPF; SCCs as contractual fallback |
| Simple Analytics | Cookieless website analytics | EU (Netherlands) | Not applicable (EEA) |
| Resend | Transactional email delivery (enquiry fallback) | US | EU-U.S. DPF; SCCs as contractual fallback |
| Cloudinary | Image and video delivery (CDN) | US / EU | EU-U.S. DPF; SCCs as contractual fallback |
| Cloudflare | Bot protection (Turnstile) for signup and the instant check | US / EU | EU-U.S. DPF; SCCs as contractual fallback |