Legal
Sub-processors
Last updated 24 October 2026
These are the outside services PayTrail uses that may store or process personal data, including the customer details businesses put into PayTrail. Each one is bound by a data protection agreement with us or, for payment providers, with the business that connects them. This list forms part of our Data Processing Agreement.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage (logos). Holds all account, business and customer data.Where: European Union | European Union |
| Vercel | Hosts and runs the PayTrail website and app; processes requests in transit.Where: Global (United States company) | Global (United States company) |
| Email delivery provider | Sends account emails and the quotes, invoices and receipts you choose to email.Where: Depends on provider | Depends on provider |
| Stripe, Paystack, Flutterwave, Bachs | Only when a business connects one: takes card and bank payments from its customers. PayTrail sends the amount, the document reference and the customer's name, email and (for Flutterwave) phone number. PayTrail's own plan billing uses one of these too.Each business has its own agreement with the provider it connects.Where: Varies by provider | Varies by provider |
Changes to this list
We'll update this page and tell account owners by email at least 30 days before adding a new sub-processor that handles customer data, so you can object. Questions: support@paytrail.app.