List of Subprocessors
Last Updated: June 13, 2026
To deliver our Service, eqr.link engages third-party infrastructure and service providers who may process personal data on behalf of our customers. Under data protection regulations (such as GDPR Article 28), these providers are classified as Subprocessors.
We require all engaged subprocessors to maintain strict data security standards and adhere to data protection agreements (including Standard Contractual Clauses where applicable).
1. List of Active Subprocessors
The following table lists the active subprocessors engaged by the Company:
| Subprocessor Name | Corporate Entity | Purpose | Hosting/Processing Location | Transfer Safeguard / Notes |
|---|---|---|---|---|
| Turso (LibSQL) | Chiselstrike, Inc. | Relational database hosting for accounts, QR codes, billing ledger, and analytics. | European Union (EU) | Primary data storage. |
| Cloudflare | Cloudflare, Inc. | Content Delivery Network (CDN), edge routing, stateless workers redirect execution, and DDoS mitigation. | Global (Edge locations nearest to scanner) | Standard Contractual Clauses (SCCs). Stateless execution (no persistent scanner logs kept on edge). |
| Stripe | Stripe, Inc. | Payment processing and billing checkout management. | United States (US) | EU-U.S. Data Privacy Framework / SCCs. Processes billing credentials and payment tokens. |
| Resend | Resend, Inc. | Transactional email delivery (magic login links). | United States (US) | Standard Contractual Clauses (SCCs). |
| Google LLC | Google Sign-in OAuth 2.0 authentication service. | United States (US) | EU-U.S. Data Privacy Framework / SCCs. | |
| Base L2 Network | Decentralized Network | Immutable anchoring of encrypted QR code mapping metadata. | Global / Public Blockchain | Encrypted payloads only. Immutable public ledger. Defer to blockchain disclosure. |
2. Notification of Changes to Subprocessors
We maintain this page to provide transparency regarding our subprocessors. If we plan to engage a new subprocessor or replace an existing one:
- We will update this page at least 30 days prior to engaging the subprocessor.
- Registered customers on paid plans may subscribe to email notifications for subprocessor changes by contacting support@eqr.link.
- Right to Object: Customers may object to the engagement of a new subprocessor on reasonable grounds related to data protection by submitting a written objection to support@eqr.link within 14 days of the notification.