Legal
Subprocessors
The specialist providers we rely on to run Yumpit. If a company is not on this list, it has no access to your data.
Last updated: 26 July 2026
SupabaseDatabase and authenticationEuropean Union- VercelApplication hostingUnited States
StripePayment processingUnited States- ResendTransactional emailUnited States
AnthropicAI assistantUnited States
PostHogProduct analyticsEuropean Union
SentryCloud monitoringEuropean Union- GitHubVersion controlUnited States
monday.comCollaborationUnited States
SlackClient supportUnited States
OpenAIAI assistantUnited States
Google DriveData storageUnited States
Google AnalyticsData analyticsUnited States
Google AdsMarketingUnited States
LinkedInRecruitingUnited States
InstagramAdvertisingUnited States
Each name links to that company's own privacy policy.
Changes to this list
We update this page before a new subprocessor starts handling customer data, not after. Email privacy@yumpit.com to be told when it changes.
Two limits worth naming
Card numbers are handled entirely by Stripe and never reach our servers. And our error monitoring is configured not to send request bodies, so invoice lines, supplier pricing and payroll figures stay out of it.
Questions
For security reviews, transfer questions, or a countersigned copy of our Data Processing Addendum, contact privacy@yumpit.com.