Subprocessors
Last updated: May 2026
REPPPS uses a small, stable set of third-party services to operate. The following subprocessors may process personal data on our behalf: Vercel (hosting and delivery), Turso (database), Resend (transactional email), and Upstash (rate limiting). All subprocessors are bound by data processing agreements or equivalent safeguards.
Vercel Inc.
- Role
- Hosting, CDN, and serverless functions
- Jurisdiction
- USA
- Notes
- Processes request logs, IP addresses, and response payloads in transit. EU-US Data Privacy Framework (DPF) certified.
ChiselStrike Inc. (Turso)
- Role
- Primary database (libSQL)
- Jurisdiction
- USA (EU region in production)
- DPA
- DPA available on request
- Notes
- Stores all workout data, personal records, body metrics, and notes.
Resend Inc.
- Role
- Transactional email delivery
- Jurisdiction
- USA
- Notes
- Receives email address and message content for transactional sends only; no marketing emails.
Upstash Inc.
- Role
- Redis rate limiting
- Jurisdiction
- USA (multi-region)
- DPA
- DPA available on request
- Notes
- Processes user IDs as rate-limit keys; no personal data content stored.