Subprocessors
Version 1.4 · Effective October 23, 2026
This page lists the third parties that process Eden One data. It forms part of the Privacy Policy and may be supplied as it stands for a vendor review, an insurance questionnaire or a broker's compliance check.
1. Infrastructure
| Provider | Function | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, document storage | Account data and all customer data, including uploaded documents | Central EU — Frankfurt, Germany (eu-central-1) |
| Vercel | Application hosting and delivery | Request data in transit; aggregated usage data kept by Web Analytics and Speed Insights | Global edge network |
2. Communication
| Provider | Function | Data processed | Location |
|---|---|---|---|
| Resend, delivering via Amazon SES | Transactional email only: account invitations and password resets; invoices sent by customers to their brokers; driver settlement statements sent by customers to their drivers; detention notices and detention claims sent to brokers; carrier packets sent to brokers | Recipient name and email address, message contents and attachments: invoice and settlement statement PDFs, rate confirmations and proofs of delivery, detention claim PDFs with stop addresses and arrival and departure times, and the carrier documents in a carrier packet (operating authority, W-9, certificate of insurance, carrier profile) | United States / European Union |
| Telegram | Support conversations, where a customer chooses that channel | Message contents supplied by the customer | Per Telegram's own terms |
We do not use a marketing email platform. No mailing list is created on signup.
3. Payments and other services
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Lemon Squeezy | Subscription billing, as merchant of record | Billing data the customer enters directly with the provider: name, billing address, payment card details. No customer data: no loads, drivers, documents or invoices are sent to it. | United States |
| Anthropic | Extracting load details from rate confirmations you import; proposing the type and dates of a document when it is uploaded (can be turned off) | Text of imported rate confirmations: broker contact names, emails and phone numbers, pickup and delivery addresses, sometimes driver names. Uploaded documents read at upload: company, truck and trailer documents, and driver documents such as the licence, medical certificate or motor vehicle record (never the employment application, previous employers or drug and alcohol records) | Processed in the US, Europe, Asia and Australia; stored in the United States |
| Google Maps Platform | Geocoding addresses, route distances, route directions and maps | Pickup, stop and delivery addresses and coordinates, including addresses typed on the load form or read from an imported rate confirmation; the viewer's IP address when the interactive map loads | Any country where Google or its subprocessors maintain facilities |
| Cloudflare (Turnstile) | Checking that a person, not an automated script, is signing in, creating an account or requesting a password reset | The visitor's IP address and technical signals from the browser on those pages; no account or customer data | Global network |
3.1 As merchant of record, Lemon Squeezy is the seller of record for each subscription and is responsible for invoicing and for collecting and remitting sales tax and VAT. We do not receive or store payment card details.
4. Not used
4.1 No advertising networks.
4.2 No cross-site or third-party analytics.
4.3 No data brokers or list vendors.
4.4 We do not use customer data to train machine learning models.
5. International transfers
5.1 Where a provider processes personal data outside the European Economic Area, that transfer relies on the mechanisms available under the GDPR, including standard contractual clauses entered into by the relevant provider.
6. Changes
6.1 This page is updated when the list changes and the version and date at the top are revised.
6.2 Account owners are notified before a provider that will process customer data is added.
6.3 Earlier versions are retained in our public repository.
7. Requests
7.1 Requests for a signed data processing addendum, or for a specific security or vendor questionnaire to be completed, may be sent to hello@edenone.app.