Legal
Subprocessors
The providers that process personal data for Regsta, what each one does, and where.
Last updated 29 September 2026
Draft, awaiting legal review. This list matches the external services Regsta's code calls today. The contracts and data-residency terms with each provider are still being reviewed.
In use today
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Database and sign-in | Company data, sign-in data and the audit trail | Falkenstein, Germany (EU) |
| Vercel Inc. | Application hosting, and cookieless visitor statistics on the public website | Request metadata; aggregate page-view figures (public website only) | Frankfurt, Germany (EU), region fra1 |
| Upstash, Inc. | Rate limiting | Rate-limit keys and request metadata, not message content | Not yet recorded |
| Resend | Email delivery: invitations and contact-form messages | Email addresses and the content of those emails | Not yet recorded |
| Expo (650 Industries, Inc.) | Push notifications to the mobile app, passed on to Apple (iOS) or Google (Android) for delivery | Device push token, generic message text without names, times or shift details, a company identifier, a screen hint, and delivery receipts | USA. Transfer mechanism not yet recorded |
Hetzner's location has been checked technically, by network and IP address lookups. Confirmation against the hosting contract is still open.
Set up in the code, not in use
These services are built into Regsta but send no data today. Each one is reviewed before it is turned on.
| Provider | Purpose | Data | Status |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Billing for paid plans | Company billing contact, company name, company registration number and subscription status. No employee data | Not in use: Regsta sells no paid plans. Ireland (EU) |
| GlitchTip or another Sentry-compatible error service | Server error reports | Event name, error type and tags without personal data. Messages, stack traces and request data are left out | Not in use: sends nothing unless it is configured. Intended to be self-hosted in the EU |
Other services
Regsta uses no SMS provider. Sign-in is by email only.
Changes to this list
No subprocessor is added without updating this list. Changes are notified in writing to each customer's Admin before they take effect.