Sub-processors
Basepop — operated by PMH Digital Consulting
CVR: 43409948
Last updated: 24 May 2026
This page lists the third-party sub-processors that PMH Digital Consulting engages to process personal data in connection with providing the Basepop Service. A sub-processor is any third party that processes personal data on our behalf and under our documented instructions.
All sub-processors are bound by data processing agreements that require them to protect personal data to at least the standard required by the GDPR. Where a sub-processor is located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).
We will update this page before engaging any new sub-processor that processes personal data, giving customers the opportunity to raise objections in accordance with our Terms of Service and Privacy Policy.
Infrastructure and Hosting
| Vendor | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Vercel Inc. | Frontend hosting and serverless compute for the Basepop platform and marketing site. | EU (Frankfurt) | vercel.com |
| Supabase Inc. | Authentication, relational database (OLTP), and workspace metadata storage. | EU (Frankfurt) | supabase.com |
| ClickHouse Cloud | Analytics data warehouse (OLAP) for storing and querying time-series business data ingested from connected integrations. | EU (Frankfurt) | clickhouse.com |
| Railway Corp. | Backend compute for data orchestration pipelines (Dagster). | EU (Frankfurt) | railway.app |
Payments
| Vendor | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Stripe Inc. | Payment processing and subscription billing. Stripe acts as an independent data controller for payment card data under its own privacy policy. | EU / US (SCCs in place) | stripe.com |
| Vendor | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Resend Inc. | Transactional email delivery (account notifications, billing receipts, alerts). | US (SCCs in place) | resend.com |
Monitoring and Observability
| Vendor | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Sentry (Functional Software Inc.) | Real-time error monitoring and exception tracking. Error reports contain stack traces and metadata about the action that caused the error. They are never enriched with your business data. | EU (Frankfurt) | sentry.io |
| PostHog Inc. | Product analytics and feature flags. Tracks pseudonymised usage events to help us understand how the platform is used. Analytics cookies require your consent — see our Cookie Policy. | EU (Frankfurt) | posthog.com |
AI and Language Models
| Vendor | Purpose | Data location | Privacy policy |
|---|---|---|---|
| Anthropic PBC | Large language model inference for AI chat and AI agent features. Queries sent to the model are scoped to your workspace data and are not used to train Anthropic's models under our API agreement. | US (SCCs in place) | anthropic.com |
Changes to This List
We review and update this sub-processor list as our infrastructure evolves. Before engaging a new sub-processor that processes personal data, we will update this page and notify customers via email at least 10 days in advance, giving you the opportunity to raise a reasoned objection. If you object and we cannot accommodate your concern, you may terminate your subscription in accordance with our Terms of Service.
To be notified of sub-processor changes by email, ensure your account email address is current. You can update it in your account settings.
Questions
For questions about this list or our data processing arrangements:
PMH Digital Consulting
CVR: 43409948
Email: hello@basepop.app
This sub-processor list was last updated on 24 May 2026.