Sub-processor List

Last updated: October 13, 2026
Version: 1.0

This list forms Annex 3 of the Preb Data Processing Agreement (DPA). It names every company that processes Customer Data and Results (the contact data our Customers upload and enrich) on behalf of Kranz & Gupta, Indiepal GbR ("Preb"). Providers that process only account, billing, support or website data, such as Stripe, Resend, Google sign-in, Featurebase and Termly, are not sub-processors for Customer Data and are described in our Privacy Policy instead.

Each sub-processor is bound by a written data processing agreement that imposes obligations equivalent to those Preb accepts in the DPA.

How we tell you about changes

We give Owners and Admins at least 30 days notice by email before we add or replace a sub-processor, unless a provider gives us less notice, in which case we pass on the notice we receive without delay. You may object within 14 days under Section 6 of the DPA. To receive these notices at an additional address, email hello@preb.co.

Tier 1: sub-processors engaged directly by Preb

Supabase

• Entity and location: Supabase, Inc., USA
• Activity: database, authentication, file storage, live updates
• Data processed: all Customer Data and Results, uploaded files
• Where the data is stored: USA (AWS region us-east-1)
• Transfer mechanism: EU Standard Contractual Clauses (2021/914) in the Supabase data processing addendum

Vercel

• Entity and location: Vercel Inc., USA
• Activity: application hosting, serverless functions, scheduled jobs, request logs
• Data processed: all data passing through the application while it is processed
• Where the data is stored: USA
• Transfer mechanism: EU-US Data Privacy Framework, supplemented by Standard Contractual Clauses

FullEnrich

• Entity and location: FullEnrich Corp, San Francisco, USA
• Activity: finding and verifying work emails, personal emails, phone numbers and public professional profile data; identifying people from an email address
• Data processed: contact names, company names and domains, LinkedIn profile URLs, email addresses, and the Results returned; technical reference IDs
• Where the data is stored: European Union (DigitalOcean)
• Transfer mechanism: EU Standard Contractual Clauses (2021/914) incorporated in the FullEnrich data processing agreement, Preb as data exporter. FullEnrich keeps results for 3 months, then deletes them

Tier 2: sub-processors engaged by our sub-processors

Our sub-processors use their own providers. We list the ones that can come into contact with Customer Data, as published by each sub-processor on the date above. The live lists are maintained by the sub-processors at the links given.

Engaged by FullEnrich

List published at fullenrich.com/sub-processor

• DigitalOcean (DigitalOcean, LLC, USA): cloud hosting for FullEnrich. Data processed: data processed through FullEnrich. Stored in: European Union.
• Enrow (Enrow, EU): finding email addresses. Data processed: names, company names, LinkedIn URLs, email addresses. Stored in: European Union.
• Icypeas (Icypeas, EU): finding email addresses. Data processed: names, company names, LinkedIn URLs, email addresses. Stored in: European Union.
• Datagma (Datagma, EU): finding phone numbers and enriching profiles. Data processed: names, company names, LinkedIn URLs, phone numbers. Stored in: European Union.
• BounceBan (BounceBan, USA): checking email deliverability. Data processed: email addresses. Stored in: USA.
• EmailListVerify (CyberPanda, EU): checking email deliverability. Data processed: email addresses. Stored in: European Union.
• ListMint (ListMint, USA): checking email deliverability. Data processed: email addresses. Stored in: USA.

Engaged by Supabase

List published at supabase.com/legal/subprocessors

• Amazon Web Services (Amazon Web Services, Inc., USA): cloud infrastructure for the database, storage and authentication. Stored in: USA (us-east-1).
• Cloudflare (Cloudflare, Inc., USA): network edge, traffic routing and protection. Stored in: USA and global edge.

Engaged by Vercel

List published at vercel.com/legal/subprocessors

• Amazon Web Services (Amazon Web Services, Inc., USA): cloud infrastructure for hosting and functions. Stored in: USA.

Change log

• October 13, 2026: first version

Contact

Questions about this list: hello@preb.co. Kranz & Gupta, Indiepal GbR, Brunnenstr. 11, 53123 Bonn, Germany.