Subprocessor List
Last updated: March 18, 2026. This page identifies the main third-party processors used to deliver OBAM's website and SaaS platform so customers and data subjects can understand who processes personal data on our behalf.
For notices of material subprocessor changes, DPA requests, or questions about a specific recipient of personal data, contact legal@obam.dev.
Current subprocessors
| Provider | Services | Personal data involved | Processing location notes |
|---|---|---|---|
| Vercel | Hosting, edge delivery, deployment infrastructure, and privacy-respecting web analytics on the marketing site. | Website telemetry, IP-derived request metadata, and content needed to serve the application. | Primary hosting configured by OBAM; may involve transfers outside the EEA depending on deployment topology. |
| Supabase | Application database, authentication, file/object storage, and operational backend services. | Account records, authentication events, product data, uploaded assets, and audit-oriented application records. | EU project hosting where configured by OBAM. |
| Resend | Transactional email delivery used for account and workflow communications. | Recipient email address, sender metadata, message content, and delivery metadata. | EU-capable processing with provider-managed delivery infrastructure. |
| Mollie | Payments, subscriptions, billing administration, and fraud screening for paid plans. | Billing contact details, transaction identifiers, payment status data, and limited order metadata. | EU-based payment processing infrastructure. |
How to use this list
This public list is intended to supplement our Privacy Notice and DPA summary. It is not a substitute for the contractual subprocessor schedule shared during procurement, which may include more detailed addresses, service descriptions, and change-notice mechanics.