Subprocessors.
These are the third parties that process data on our behalf to run EntityWatch. This list is authoritative: if a company is not on it, it does not touch your data. We update it here before a change takes effect and notify customers, as required by our data processing agreement.
Last updated: 13 August 2026
| Subprocessor | What it does | Data it processes | Location |
|---|---|---|---|
| Railway | Runs the EntityWatch application | All service data in transit | EU (West) |
| Supabase | Database for monitored companies and their history | Monitoring data, account records | EU (Ireland, eu-west-1) |
| Lovable Cloud | Sign-in and session handling for the dashboard | Email address, authentication records | To be confirmed |
| Nordicway | Hosts this website (marketing pages and blog) | Server logs; contact form messages in transit | EU (Germany, Falkenstein) |
| Resend | Delivers email we send — contact form replies, alerts | Recipient address and message content | Sent from EU (Ireland); logs in US |
| Stripe | Payment processing and invoicing | Billing details, VAT number, invoice records | Not yet in use |
Registry data itself comes from official national business registers, EU VIES, GLEIF and published sanctions lists. Those are sources we read from, not processors acting on our behalf — we send them a company identifier, never your data.
Changes to this list
We publish an intended change here before it takes effect and notify customers by email. If you object to a new subprocessor on reasonable grounds, write to contact@addonnordic.dk — the terms of that process are in the data processing agreement.