Gedachten Makelaar uses a limited number of third-party service providers ("sub-processors") that process personal data on our behalf. This overview was last updated on 4 August 2026. Changes will be communicated via the Privacy Policy.
Sub-processor overview
| Sub-processor | Role | Country | EEA transfer mechanism | Privacy / DPA |
|---|---|---|---|---|
| Supabase | Database, authentication and file storage | EU (AWS eu-west-3, Paris) | — | View |
| Stripe | Payment processing | US | SCCs (Art. 46 GDPR) | View |
| Daily.co | Video sessions (processed in Frankfurt) | EU (Frankfurt) · US company | SCCs (Art. 46 GDPR) | View |
| Deepgram (via Daily.co) | Speech to text, only with consent per call | US | SCCs (Art. 46 GDPR), via Daily.co | View |
| Resend | Transactional email | US | SCCs (Art. 46 GDPR) | View |
| Vercel | Hosting and edge functions | US | SCCs (Art. 46 GDPR) | View |
| Sentry | Error monitoring (anonymised) | US | SCCs (Art. 46 GDPR) | View |
| Anthropic | DEi assistant (AI chatbot) | US | SCCs (Art. 46 GDPR) | View |
| OpenAI | Automated detection of crisis messages in sessions | US | SCCs (Art. 46 GDPR) | View |
| Cloudinary | Image hosting for the website | US | SCCs (Art. 46 GDPR) | View |
| MyMemory | User story translation (optional) | EU (Italy) | — | View |
| Sign in with a Google account (only if you choose it) | US | SCCs (Art. 46 GDPR) | View |
Transfers outside the EEA
For sub-processors established in the United States we rely on Standard Contractual Clauses (SCCs) as referred to in Art. 46 GDPR. These safeguards ensure an adequate level of protection for your personal data.
Changes
We may add new sub-processors or remove existing ones. Material changes will be announced at least 30 days in advance via the Privacy Policy. Questions? Email info@gedachtenmakelaar.nl.