Subprocessors

We engage the following subprocessors to provide our services. Each processing takes place on the basis of a data processing agreement. Data storage is located in the EU. Individual processing steps run via providers established in third countries; we base those transfers on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.

Data storage and infrastructure

• Supabase — database, authentication, file storage and the encrypted vault for passport data — project region: West EU (Paris), parent company USA
• Vercel Inc. — delivery of the web interface — location: EU region, parent company USA

Processing in third countries (Standard Contractual Clauses)

These providers receive only the data the respective step strictly requires. They are not permitted to use it for their own purposes.

• Anthropic PBC — extracts inbound agency emails and riders, powers the Noctura assistant — location: USA
• Twilio SendGrid — receipt of the booking address and dispatch of advancing emails — location: USA
• Resend — dispatch of transactional and system emails — location: USA
• Stripe Payments Europe Ltd. — payment processing and subscription management — location: Ireland, parent company USA
• Duffel — flight search and booking, only where the travel agent is active; receives passenger and passport data — location: United Kingdom (adequacy decision of the European Commission)
• Expo (650 Industries, Inc.) — push notifications to the Crew app — location: USA

Only after consent

This service is contacted only after you have agreed in the application. Without your agreement, no connection is made.

• CARTO (CARTO DB Inc.) — map tiles in transfer planning; on load it receives your IP address and the map section — location: USA

Without transmitting your IP address

• OpenStreetMap Foundation (Nominatim) — turning addresses into coordinates; called exclusively from our server, your IP address is not transmitted — location: United Kingdom

Optional integrations

These services run only if you actively connect them in your account. Without a connection, no transmission takes place.

• Notion Labs, Inc. — syncing bookings with a Notion database — location: USA
• Meta Platforms Ireland Ltd. — sending messages via WhatsApp Business — location: Ireland, parent company USA

Changes

We inform contractual partners of changes to this list in good time so that a right to object can be exercised. List as of August 2026.