Subprocessor List
Last updated: 15 July 2026
COREGAME engages the following subprocessors to deliver Takamol4. Each is bound by data-protection obligations materially equivalent to those in our Data Processing Agreement.
| Vendor | Purpose | Data categories | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Managed Cloud Platform | Managed application hosting, database, authentication, and file storage | Account data, participant data, session results, application logs | Ireland (European Union) | Vendor DPA; SCCs where applicable |
| Supabase, Inc. | PostgreSQL database, authentication, and storage infrastructure underlying the above | Account data, participant data, session results | Ireland (European Union) | Engaged via the managed cloud platform |
| Amazon Web Services, Inc. | Underlying cloud compute and storage infrastructure | All hosted data (encrypted at rest) | Ireland (European Union) — AWS eu-west-1 | Engaged via the above; AWS DPA |
| Resend, Inc. | Transactional email delivery (session invitations, authentication, notifications) | Names, email addresses, message content and metadata | United States | Resend DPA incorporating EU Standard Contractual Clauses; certified under the EU–US Data Privacy Framework and the UK Extension |
Not currently used: analytics providers, advertising networks, error-monitoring services, AI providers, payment processors. Any of these must be added to this table before being enabled in production.
Change notification: Customers may subscribe to subprocessor updates on the Legal Updates page. COREGAME will give 30 days' notice of a new subprocessor where practicable.