Sub-processors
Backpack Works engages a limited set of trusted third parties ("sub-processors") to help deliver our services. Each sub-processor is bound by contractual obligations to protect data and process it only as needed to provide their service to us.
This list is maintained as part of our commitment to transparency under the GDPR and our Data Processing Agreement. We notify clients of material changes in advance where their agreement requires it.
| Sub-processor | Purpose | Location |
|---|---|---|
| Vercel | Application hosting & edge delivery | United States |
| WP Engine | Managed WordPress hosting for client sites | United States |
| Supabase | Database, authentication & storage backend | United States |
| Cloudflare | CDN, DNS & DDoS protection | United States (global edge) |
| HubSpot | CRM & marketing automation | United States |
| Google Workspace (G Suite) | Email, documents & collaboration | United States |
| Google Workspace SSO | Identity & single sign-on | United States |
| Prismic CMS | Headless CMS for client sites | France / EU |
| Slack | Internal team communication | United States |
| 1Password | Secrets & credential management | Canada |
Questions
To request notification of changes or ask about a specific sub-processor, contact privacy@backpack.works.