← Back to Trust & Security
Vendor and Transfer Register
Version: v2.0
Last updated: 13.07.2026
Next review: 01.10.2026
This register describes service providers used by Lyyli, their roles, data categories, and transfer mechanisms. The contractual subprocessor list for customers is in a separate DPA annex.
| Provider | Service | Storage / transfers | Mechanism | Verification |
|---|---|---|---|---|
| Clerk, Inc. | Authentication and identity management | Primary customer data in EU/EEA; support, telemetry and subprocessors may involve international transfers | SCCs, DPF where applicable | partial |
| Vercel Inc. | Application hosting and edge infrastructure | Configured regions (e.g. EU); default function regions and logs require separate verification | SCCs, DPF where applicable | partial |
| Supabase, Inc. | Database, file and object storage | EU project region (configured) | SCCs where applicable | verified |
| OpenRouter, Inc. | AI request routing to model providers | Route-dependent; ZDR and EU routing require explicit configuration per route | SCCs, provider-specific terms | partial |
| Resend, Inc. | Transactional email delivery | Sending region may be EU; account and metadata storage may include the United States per Resend documentation | SCCs, DPF where applicable | verified |
| Stripe, Inc. | Payments, subscriptions and invoicing | International processing with SCCs and DPF mechanisms | SCCs, DPF | verified |
| Slack Technologies, LLC | Slack integration and message processing | Data residency depends on Slack plan and configuration; not all data categories are covered | SCCs, DPF where applicable | partial |
| Recall.ai, Inc. | Meeting bots, recordings and transcription | eu-central-1 default; route-specific verification required | SCCs where applicable | partial |
| Google LLC | Google Calendar integrations and model services where enabled | EU or USA depending on service and configuration | SCCs, DPF where applicable | partial |
| Microsoft Corporation | Outlook and Microsoft calendar integrations | EU/EEA regions where configured (e.g. Sweden) | SCCs, DPF where applicable | partial |
| PostHog, Inc. | Product and marketing analytics (EU cloud) | EU (eu.i.posthog.com) | SCCs where applicable | verified |
| Usercentrics A/S | Cookie consent management | EU | SCCs where applicable | verified |
| Pipedrive OÜ | CRM and sales pipeline | EU (vendor-dependent configuration) | SCCs where applicable | partial |