Subprocessors

The complete list

These are every third party that touches customer data on our behalf. Not a representative sample: the whole list.

Vercel (hosting)

Runs the application itself. As the host, it processes requests and, like any web host, sees request metadata including IP addresses at the network layer.

Data: whatever passes through a request, in transit. Vercel does not hold your workspace's records; the database does.

Supabase (database)

Hosts the Postgres database, which is where everything lives: people, schedules, punches, timesheets, clock-in photos, the audit trail.

We use Supabase as a database only. We do not use its authentication, its file storage or its data API.

Resend (email delivery)

Delivers our transactional email: sign-in links, invitations, shift reminders, notifications.

Data: the recipient's email address, and the content of the message, which includes their first name and, for sign-in mail, a single-use link.

Sentry (error reporting)

Receives a report when the application throws an error, so that we find out about a fault before you have to tell us.

Data: the error and its stack trace. We have configured it not to attach IP addresses, request headers or cookies, and there is no session recording. An error message could still incidentally contain data, which is a limitation of error reporting generally and worth stating plainly.

Google (only if you sign in with Google)

If you choose Sign in with Google, Google tells us your email address and name, and confirms the address is verified. If you sign in with an email link instead, Google is not involved at all and receives nothing.

That is the whole list

There is no analytics provider, no advertising network, no customer support widget, no CRM, no data warehouse, and no external AI service. The coverage agent runs on our own servers, so no scheduling data, no employee record and nothing typed into the product is sent to a language model.

Payments are not on this list because Formclock does not process payments yet. When billing ships, the payment processor will appear here before it takes a card.

Changes

If we add a subprocessor we will update this page and tell account admins. Customers who need advance notice, or a data processing agreement, should write to us.

Contact

privacy@formclock.com