Version 1.2. Effective from 20 September 2026. These providers process personal data for Laudatus Ltd, the operator of EUWithdraw, when needed to deliver the service. They act as subprocessors for merchant-controlled data and as processors where Laudatus Ltd is the controller. The exact data depends on merchant configuration and use.
Swipe sideways to read the full table.
| Provider | Purpose and data | Location / transfer information |
|---|---|---|
| Vercel Inc. | Application hosting, runtime, request handling and operational logs; merchant, customer, request and security data passing through the application. | US provider with global infrastructure. A European function region does not restrict all processing to Europe. The DPA provides SCCs and a UK transfer addendum where applicable. Provider subprocessors. |
| Supabase Pte. Ltd | Managed PostgreSQL database and backups; application database records including merchant configuration, withdrawal, privacy, webhook and audit data. | Singapore contracting entity under the current standard terms. The primary database is hosted in Paris, France (eu-west-3); support and ancillary processing may occur internationally. The DPA provides SCCs and the UK Addendum where applicable. Provider subprocessors. |
| Plus Five Five, Inc. (Resend) | Transactional email, domain verification and delivery events; recipient address/name, message content, merchant identifiers and delivery metadata. | Customer data, including message content, delivery logs and account records, is stored in the United States. Sending from Ireland does not change US storage. The DPA provides SCCs and the UK Addendum, and states DPF participation. Provider subprocessors. |
Former hosting provider: Render
Render Services, Inc. previously hosted the application in Frankfurt, Germany. The service is suspended and is no longer intended as active production infrastructure. Deletion or expiry of any remaining customer data, logs or backups has not yet been confirmed, so Render remains disclosed for potential residual processing. Render’s DPA describes US processing and DPF/SCC safeguards, including UK transfer provisions. See its provider information. This entry will be removed from the current register once processing on Laudatus Ltd’s behalf has ended.
These entries describe service use and the safeguards available in vendors’ published terms; they do not certify completion of Laudatus Ltd’s account-specific contractual review. Vendors may separately act as controllers for their own account, billing or security purposes. Contact support@euwithdraw.eu for information about applicable safeguards.
Shopify relationship
Shopify provides the merchant platform, authentication, APIs, billing and privacy webhooks under its direct relationship with the merchant. Shopify is therefore not automatically an EUWithdraw subprocessor; the role must be assessed per processing activity.
Changes and objections
Merchants grant general authorisation for subprocessors under the DPA. EUWithdraw will give reasonable advance notice of a material new or replacement subprocessor where required. A merchant may object on reasonable data-protection grounds by emailing support@euwithdraw.eu. If no reasonable alternative exists, the parties may terminate the affected service under the Terms.