In accordance with GDPR Article 28 and our Data Processing Agreement, this page lists all third-party subprocessors that Ledger Link uses to process customer data.
Notification of Changes: We will notify customers at least 30 days before adding new subprocessors or making material changes. You may object to new subprocessors by contacting us within 14 days of notification.
| Subprocessor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Supabase, Inc. | Database hosting, authentication, and real-time services | All customer data, user credentials, session data | United States (AWS us-east-1) | ✓ Available |
| Vercel Inc. | Application hosting and content delivery | Request logs, IP addresses, performance metrics | United States (Global Edge Network) | ✓ Available |
| Square, Inc. (Block, Inc.) | Payment processing and subscription management | Billing information, payment methods, transaction history | United States | ✓ Available |
| Functional Software, Inc. (Sentry) | Error tracking and application monitoring | Error logs, stack traces, user context (anonymized) | United States | ✓ Available |
| Google Cloud Platform | Cloud infrastructure and AI/ML services | Application data for AI processing, infrastructure logs | United States (us-central1) | ✓ Available |
| Amazon Web Services, Inc. | Cloud infrastructure (via Supabase) | Database storage, file storage, backups | United States (us-east-1) | ✓ Available |
| Cloudflare, Inc. | CDN, DDoS protection, and DNS services | Request metadata, IP addresses, traffic patterns | Global (Edge Network) | ✓ Available |
| Resend, Inc. | Transactional email delivery | Email addresses, email content, delivery status | United States | ✓ Available |
| Microsoft Corporation (Azure AD) | Single Sign-On (SSO) authentication | User identity, authentication tokens (when SSO is enabled) | United States / EU | ✓ Available |
| Google LLC (Google Workspace) | Single Sign-On (SSO) authentication | User identity, authentication tokens (when SSO is enabled) | United States | ✓ Available |
For transfers of personal data outside the European Economic Area (EEA), we rely on:
Under GDPR, you have the right to:
For questions about our subprocessors or to request DPA copies:
Email: privacy@theledgerlink.com
Data Protection Officer: dpo@theledgerlink.com
Mail: Ledger Link, Inc.
Privacy Department
785 Garden St
Bronx, NY 10460
| Date | Version | Change |
|---|---|---|
| January 15, 2026 | 1.0 | Initial subprocessor list published |