Sub-processors
Version 1.0 · 1 November 2026
These are the providers that process personal data on behalf of Agro GPS. The list comes from the real configuration of the service, not from a template: if a provider is not here, it does not receive your data. It is part of the data processing agreement.
Providers that process data for us
| Provider | What for | Where | Safeguard |
|---|---|---|---|
| Supabase, Inc. | Notebook and account database (farms, fields, jobs, invoices, documents and files) | EU: Paris, France (AWS eu-west-3) | Within the EU; data processing agreement with standard contractual clauses |
| Supabase, Inc. | Sign-in: email, hashed password and sign-in providers | London, United Kingdom (AWS eu-west-2) | European Commission adequacy decision for the United Kingdom |
| Fly.io, Inc. | API servers that process every request from the app and the website | EU: Paris, France | Within the EU; data processing agreement with standard contractual clauses |
| Amazon Web Services EMEA SARL (Amazon SES) | Sending account emails, notices and the links to download your data | EU: Ireland (eu-west-1) | Within the EU |
| Functional Software, Inc. (Sentry) | Error reports from the app, the website and the API | EU: Germany | Data hosted in the EU; standard contractual clauses |
| Vercel Inc. | Hosting of agrogps.eu and the web app | Global network, based in the US | EU-US Data Privacy Framework and standard contractual clauses |
| Google Ireland Ltd / Google LLC (Firebase) | Push notifications, app usage and crash reports | EU and US | EU-US Data Privacy Framework and standard contractual clauses |
| Google Ireland Ltd (Google Analytics) | Aggregate website analytics, only with your consent | EU and US | EU-US Data Privacy Framework and standard contractual clauses |
| Microsoft Ireland Operations Ltd (Clarity) | Website heatmaps, only with your consent | EU and US | EU-US Data Privacy Framework and standard contractual clauses |
| Anthropic, PBC | AI assistant, only if you use it; it does not train models on your data | US | Standard contractual clauses |
| Stripe Payments Europe, Ltd | Charging web subscriptions; we never see your card | EU: Ireland | Within the EU; standard contractual clauses for its group |
| RevenueCat, Inc. | Status of subscriptions bought in the app | US | Standard contractual clauses |
Who receives data but is not a sub-processor
- App Store (Apple) and Google Play charge what you buy in the app as controllers in their own right.
- Public authorities (SIEX and the Spanish regions, or other official registers) receive only what you choose to send.
- Services you connect yourself (John Deere, CLAAS, agrirouter, Alexa, Microsoft 365 Copilot, the Google Sheets add-on, your bank) receive what you authorise when you connect them, under their own terms.
- Catastro GPS, run by the same owner, resolves a field from its cadastral reference: it receives the reference, not your account.
Who receives no personal data
Weather (Open-Meteo and the national weather services) is requested from our server with the field coordinates only, without your name or account. The official plant protection registers are downloaded; nothing is sent to them.
Changes to the list
If we add or change a sub-processor, we update this page with the date and email the customers who have a data processing agreement at least 30 days in advance, so they can object. Questions: support@agrogps.eu.