Subprocessors

We use a number of trusted subprocessors (data processors) to deliver the service. On this page we publish an up-to-date list of the subprocessors we use, in line with the GDPR transparency obligation.

1. What is a subprocessor?

A subprocessor is a third party with whom Fronterak enters into a data processing agreement (DPA) to process personal data on Fronterak's behalf. The subprocessor may only process data according to Fronterak's instructions and within the purposes limited by the agreement.

2. Current subprocessors

The subprocessors listed below process personal data on Fronterak's behalf. The list is updated whenever we add a new subprocessor or remove an existing one.

  • Supabase Inc. — database and authentication platform, location: Frankfurt EU, data processed: all user and project data
  • Vercel Inc. — website hosting and edge caching, location: United States (HQ), EU edge servers, data processed: IP addresses, server logs
  • Google LLC (Google AI Studio) — AI-powered renovation calculator, location: United States, data processed: calculator inputs (anonymised)
  • Resend Inc. — email sending (transactional and marketing), location: United States, EU edge, data processed: email address, message content
  • Cloudflare Inc. — DDoS protection and CDN, location: United States, global edge, data processed: IP addresses, HTTP requests

3. International transfers

As a general rule, personal data is kept within the EU/EEA. However, some of our subprocessors also operate in the United States. In those cases, transfers rely on the EU Commission's Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework, together with additional technical safeguards on the recipient side.

4. Ensuring data protection

We enter into written data processing agreements (DPAs) with all subprocessors that include the obligations of Article 28 GDPR. We assess the security practices of subprocessors before starting cooperation and regularly thereafter.

5. Notification of changes

We notify users of new subprocessors or replacements of existing subprocessors via the service or by email at least 30 days before the change takes effect. You then have the opportunity to object to the change — contact info@fronterak.fi.

Last updated: 12 May 2026