As at 18 August 2026
List of sub-processors
Annex 3 to the Data Processing Agreement (DPA) for the Software-as-a-Service application strokebook. espressino GmbH, Talbächliweg 19, 8048 Zurich, UID CHE-140.311.613.
This is a convenience translation. The legally authoritative version of this list of sub-processors is the German one.
The current version of this list is available at strokebook.club. Section 7.3 of the DPA applies to the addition or replacement of sub-processors (30 days' prior notice, right to object, right to terminate).
Sub-processors engaged
| Sub-processor | Service | Place of processing | Safeguards |
|---|---|---|---|
| Supabase Pte. Ltd, 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 | Database, authentication, storage, Edge Functions (hosting of the application) | Hosting region Switzerland (AWS eu-central-2, Zurich); support and operational access from third countries (in particular Singapore) possible | DPA with standard contractual clauses (SCC) incl. Swiss adaptations |
| Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA | Hosting and delivery of the web application (frontend, CDN) | USA; worldwide CDN delivery | DPA with SCC incl. Swiss adaptations; certified under the Swiss-US Data Privacy Framework |
| Sendinblue SAS (Brevo), 17 rue Salneuve, 75017 Paris, France | Transactional e-mail delivery | EU | DPA under the GDPR |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Maps Platform) | Address lookup and map display in the club profile | EU and USA; with address autocompletion the IP address reaches Google directly | DPA with SCC incl. Swiss adaptations |
| OpenAI, L.L.C., 1455 3rd Street, San Francisco, CA 94158, USA | AI features, where activated by the club: voice capture of outings (transcription and evaluation of the voice input, including any member names spoken in it) | USA | DPA with SCC incl. Swiss adaptations; no use of the data for model training |
| Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA | AI features, where activated by the club (for example training plans, analysis and assistance features on club data) | USA | DPA with SCC incl. Swiss adaptations; no use of the data for model training |
The sub-processors in turn engage their own sub-processors (in particular Amazon Web Services as the infrastructure provider of Supabase); espressino is liable for this in accordance with Section 7.2 of the DPA.