CURRENT AT 25 August 2026
Subprocessors
This register identifies subprocessors authorised to process Customer Personal Data for Chasd. Provider processing locations and onward providers can change; the linked live provider lists form the current location and onward-processing detail.
1. Authorised subprocessors
Supabase, Inc.
Service: Managed database and authentication
Data: Workspace, user, contact, invoice, case, correspondence and audit data
Data processing terms · Provider’s current subprocessor details
Vercel Inc.
Service: Application hosting, server execution and content delivery
Data: Application requests, service content and technical logs
Data processing terms · Provider’s current subprocessor details
Plus Five Five, Inc. (Resend)
Service: Outbound reminder delivery, inbound reply receipt and delivery events
Data: Sender and recipient addresses, subject, message body, replies and delivery metadata
Data processing terms · Provider’s current subprocessor details
2. Other connected providers
Xero is the customer-selected accounting source and provides API data at the customer’s direction. Stripe processes Chasd subscription billing and payment data. They are listed in our Privacy Notice as recipients or connected providers, but are not treated in this register as subprocessors of debtor correspondence for the core Chasd workflow.
3. Changes and objections
We will update this page before a new subprocessor starts processing Customer Personal Data and give the notice required by our Data Processing Addendum. A customer may object on reasonable, documented data-protection grounds during the notice period.
Questions and objections: privacy@chasd.co.uk.