Draft — pending legal review

This document is a structural placeholder. The final wording must be reviewed and signed off by a qualified data-protection lawyer before it is relied upon.

Sub-processors

Third-party providers Schedula uses to deliver the service.

Version 1.0Effective May 7, 2026

Schedula uses the sub-processors listed below to operate the platform. Each is bound by a Data Processing Agreement and, where applicable, Standard Contractual Clauses for transfers outside the EU/EEA. We will notify account owners at least 30 days before adding or replacing a sub-processor.

  • Twilio

    Purpose
    WhatsApp and SMS notifications
    Region
    Ireland / EU
    Compliance
    DPA + SCCs
  • Firebase Cloud Messaging (Google)

    Purpose
    Push notifications (Firebase Cloud Messaging)
    Region
    EU instance
    Compliance
    DPA
  • Stripe

    Purpose
    Subscription billing
    Region
    Ireland / EU
    Compliance
    DPA + SCCs
  • Resend

    Purpose
    Transactional email
    Region
    United States
    Compliance
    SCCs
  • Render

    Purpose
    Application hosting
    Region
    Region-dependent
    Compliance
    DPA

Notes

  • Sub-processor list current as of the effective date shown above.
  • Resend operates in the United States; transfers rely on Standard Contractual Clauses.
  • Render hosting region depends on the deployment configuration; tenant-data residency commitments are documented in the DPA.
  • Push tokens themselves are operational data and are not exported through the data-portability flow.