Subprocessors
The companies that process personal data on our behalf to run certia.ie and the Certia app.
Last updated 14 October 2026
Each provider below works under a written contract that limits what it can do with the data. Where data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. See the privacy notice for more.
| Provider | What they do for us | Data involved | Where data is processed |
|---|---|---|---|
| Cloudflare, Inc. | Hosting for the website and app files, DNS, security, bot checks (Turnstile), cookie-free visitor statistics, and encrypted backup storage. | IP addresses, browser details, website requests, encrypted database backups. | Global edge network. Backups stored in the EU. |
| Supabase, Inc. | Main database, user sign-in, file storage (photos, signatures, PDFs) and server functions. | User accounts, job and customer records, completed forms, photos, signatures, the early access list. | EU (Ireland). |
| PowerSync (JourneyApps) | Keeps job data in step between the database and each user’s device, so the app works offline. | Job records and forms assigned to each user. | EU. |
| Resend | Sends sign-in links, invitations and notification emails. | Names, email addresses, email content. | Sent from the EU (Ireland). Delivery logs held in the US. |
| Sentry (Functional Software, Inc.) | Error reporting, so we can find and fix faults in the app. | Technical error details, device and browser information, user ID. | EU (Germany). |
| Stripe Payments Europe, Limited | Subscription billing for customer companies. | Billing contact, company details, payment details. | EU (Ireland), with transfers within the Stripe group. |
| Microsoft Ireland Operations Limited | Company email and documents (Microsoft 365). | Correspondence with customers and people on the early access list. | EU. |
Changes to this list
We update this page before a new subprocessor starts handling personal data. Customer companies are told about changes as set out in their data processing agreement, and can object under the terms of that agreement.
Questions: privacy@certia.ie.