Subprocessors
Enterall subprocessors
Last updated: November 5, 2026
These companies process customer personal data on behalf of Enterall to provide the service. Each is bound by a data processing agreement with data protection terms at least as protective as our Data Processing Agreement. Transfers outside the EEA rely on the European Commission Standard Contractual Clauses in each provider's agreement.
| Subprocessor | Processing task | Location |
|---|---|---|
| Enterall ApSAffiliate, CVR 46828828 | Engineering, operations, and customer support | Denmark |
| Supabase | Database, authentication, file storage, and realtime collaboration | Sweden (AWS eu-north-1); Supabase Inc. is based in the United States |
| Vercel | Web application hosting and API functions | Sweden and Germany (arn1, fra1); global content delivery network |
| Railway | Backend services for collaboration sync, MCP, and image and thumbnail processing | Netherlands (europe-west4) |
| Amazon Web Services | Board image storage and delivery (S3, CloudFront) | Sweden (eu-north-1); CloudFront edge caching worldwide |
| Microsoft Azure | AI image and text models (Azure OpenAI) and drawing workers | Sweden (Sweden Central); model inference may run in any Azure region |
| Google Cloud | Gemini and Veo AI models and media storage | Belgium (europe-west1) for storage; Gemini inference on Google’s global endpoint; Veo in the United States |
| Google Workspace | Email for customer support and correspondence | United States and European Union |
| fal.aiFeatures & Labels, Inc. | Image generation and upscaling | United States |
| PostHog | Product analytics, error diagnostics, and consented session replay | Germany (PostHog EU Cloud) |
| Resend | Transactional email | Ireland (AWS eu-west-1); Resend, Inc. is based in the United States |
| Stripe | Payments and billing | Ireland and United States |
| Apple Push Notification service | iOS push notifications | United States |
| Browser push services (Google, Mozilla, Apple) | Web push notifications | United States |
Changes to this list
We give at least 10 business days' notice before a new subprocessor starts processing customer personal data. Customers then have 30 days to object, as described in the DPA. To receive notices, subscribe by email.