AlpacaKeep
Get early access
Sub-processors

Sub-processors

We use the processors below under GDPR Article 28 and the Data Processing Agreement. Each receives only the data needed for its stated role. Google is not on this list: if you choose Google Sign-In, Google acts as an independent controller for that sign-in only and receives no certificates or farm data.

Last updated: 25 October 2026

1. Active sub-processors

These providers are authorised to process customer data for the purposes below. A conditional provider receives no customer data until the relevant feature is enabled and used.

For customers in the United Kingdom: the data processing terms of Supabase, Vercel, Cloudflare, Resend and Anthropic also cover transfers that fall under the UK GDPR, through the UK addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement. Mailbox.org stores the data in the EU.

For customers in New Zealand or Australia: the same providers and regions apply, and your data is stored in Frankfurt. How your records reach you in Australia is set out in the Data Processing Agreement, Section 6.

Supabase Inc.

  • Role: Database, authentication, and file storage
  • Region: Frankfurt, Germany (EU)
  • Transfer: Customer data is stored and processed in the EEA (eu-central-1, Frankfurt). Because Supabase Inc. is US-incorporated, its Data Processing Agreement and the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) remain the safeguard for any incidental access by the US parent.
  • Data Processing Agreement ↗

Vercel Inc.

  • Role: Application hosting and CDN
  • Region: Edge functions pinned to fra1 (Frankfurt)
  • Transfer: Some platform telemetry processed in the United States under EU Standard Contractual Clauses.
  • Data Processing Agreement ↗

Cloudflare Inc.

  • Role: DNS resolution for alpacakeep.com
  • Region: Global anycast network
  • Transfer: No application data is stored; only DNS queries for alpacakeep.com are processed. Queries resolve at the nearest Cloudflare point of presence, which may be outside the EEA, so the Cloudflare Data Processing Addendum and the EU Standard Contractual Clauses (Decision (EU) 2021/914) apply. We do not use Cloudflare to proxy, cache or inspect HTTP traffic.
  • Data Processing Agreement ↗

Heinlein Hosting GmbH (Mailbox.org)

  • Role: Email hosting for @alpacakeep.com mailboxes
  • Region: Berlin, Germany (EU)
  • Transfer: No transfer outside the EEA via this processor.
  • Data Processing Agreement ↗

Plus Five Five, Inc. (Resend)

  • Role: Sending our newsletter emails to our subscribers, and nothing else. Transactional email (sign-in, inquiries, legal notices) stays on Mailbox.org above.
  • Region: Emails sent from the EU (Ireland); Resend's processing, including its logs, takes place in the United States
  • Transfer: Receives only the subscriber's email address and the content of each newsletter, never account or farm data. We keep no contact list at Resend and do not track opens or clicks. The transfer to the United States is covered by Resend's Data Processing Addendum, which includes the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914); in it Resend also states that it complies with the EU-U.S. Data Privacy Framework.
  • Data Processing Agreement ↗

Anthropic Ireland, Limited (Claude API)

  • Role: Optional AI features: reading pedigree certificates to prepare a proposal for farmer review, and Ask your herd (closed test only), which answers a farm member's question from that farm's records, with an optional web search for questions about feeding and care
  • Region: Data stored in the United States; the processing may run in any region Anthropic uses; no EU residency
  • Transfer: The AI certificate reader is available on the farms where it is switched on; Anthropic receives no certificate until a user chooses "Add from a document". It then receives a selected certificate image or PDF, reading instructions and the generated proposal only when an authorised user requests the feature. Ask your herd is switched on only for the farms in its closed test, whose owners agreed to take part in writing; no other farm's data is sent for it. For each question Anthropic receives the question, the farm's country, units and currency, the asker's role and the results of the lookups the AI makes in that farm's records: animals, weights and body condition, fibre results, breeding and births, health events and medications given, tasks and labels the farm typed, and totals of income and expenses by category only when the Owner or a Co-Owner asks. It never receives notes, contacts, email addresses, documents or photos. Web searches are built only from the question and the farm's country, never from the farm's records; Anthropic runs them through its own sub-processors, and its published list names Brave Search and TurboPuffer, both in the United States, for web search (checked 9 October 2026). Anthropic processes this content under its Data Processing Addendum, which is part of its Commercial Terms and includes the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and, for the UK, the UK Addendum. Anthropic's Commercial Terms do not allow it to train its models on this content. Anthropic deletes API inputs and outputs within 30 days, but may keep content that its automated safety systems flag under its Usage Policy for up to 2 years. Under those Commercial Terms, Anthropic Ireland, Limited is the contracting Anthropic entity for customers in the EEA.
  • Data Processing Agreement ↗
  • Anthropic's list of its own sub-processors ↗

2. Planned for public launch

These providers are not yet active. They move to Section 1 before they begin processing customer data.

  • Stripe - SaaS billing, when paid plans launch.

Better Uptime (Better Stack) polls the public health endpoint /api/health from outside every few minutes. It receives no customer or personal data, so it is not a sub-processor and is mentioned here only for completeness.

3. Notification of changes

We update this page before a new sub-processor begins processing customer data and notify customers with active accounts by email at least 30 days before the change takes effect. This period is our contractual promise under the Data Processing Agreement. If you object on reasonable data-protection grounds, write to privacy@alpacakeep.com; we will seek an alternative. If none is reasonably available, you may stop using the affected feature or terminate the affected service and receive a pro-rata refund of prepaid fees for the unused period.