PlanProve
Annex A of Data Processing Agreement version 1.0. Last updated: 21 October 2026
These are the companies that process personal data for us when you use PlanProve. The list is Annex A of our Data Processing Agreement, and we keep this page up to date as the agreement requires.
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. | Database and file storage | Ireland, EU-west-1 | Adequacy |
| Anthropic PBC | AI Planning Assistant and document extraction (in-product features); and AI-assisted development, debugging, and administrative support tooling. | USA | UK Addendum to EU SCCs |
| Stripe Inc. | Payment processing for invoices paid through the platform (Stripe Connect). PlanProve does not store card details. | USA | UK Addendum to EU SCCs/DPF |
| Resend Inc. | Transactional email delivery | USA | UK Addendum to EU SCCs/DPF |
| Vercel Inc. | Application hosting. Application functions run in the UK and EU (London eu-west-2, Dublin eu-west-1, Paris eu-west-3). Request routing runs on Vercel's global edge network. | UK/EU for functions, global for edge routing | UK Addendum to EU SCCs/DPF |
| PostHog Inc. | Product analytics | EU (Frankfurt eu-central-1) | Adequacy |
| Cloudflare Inc. | Storage backup (R2) | EU | Adequacy |
Before we add or replace a sub-processor, we email the address on your PlanProve account at least 14 days in advance. You then have 14 days to object in writing. If you do not object, the new sub-processor is treated as approved and we update this page. If we have to replace one urgently to keep the service secure or running, we tell you as soon as we reasonably can, and your 14 days start from that email. The full terms are in clause 8 of the Data Processing Agreement.
Some features look things up in public services. We send these services postcodes or coordinates only, never names, emails or user ids, so they do not receive anything that identifies you or your clients.
Email info@planprove.com.