CharterFlow CRM — Subprocessors
Last updated: 2 August 2026
CharterFlow CRM ("the Service"), operated by SUDO Technology LTD, uses the following subprocessors to provide the Service. Each processes data only as needed for its function, under its own data-processing terms.
| Subprocessor | Function | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | All Service data: account details, workspace/CRM records (clients, leads, quotations, bookings, guest details incl. identity documents where entered), uploaded files, audit logs | EU — Frankfurt, Germany (eu-central-1) (project region) |
| Vercel, Inc. | Application hosting and delivery | Request data in transit (all Service traffic), server logs (no secrets logged) | Global edge; compute region EU (Frankfurt, fra1) |
| Stripe, Inc. | Subscription billing for the Service | Workspace billing contact, subscription state. Card data is entered only on Stripe-hosted pages and never reaches the Service. | Global (Stripe infrastructure) |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Recipient email addresses, email subject/content (quotation links, booking confirmations, notifications) | United States |
| Anthropic, PBC | Optional AI assistance (inquiry extraction, reply drafting) | Only when a workspace explicitly enables AI: the inquiry text or lead context submitted for a run. API data is not used to train models per Anthropic's commercial terms. | United States |
| OpenStreetMap Foundation | Map tiles and geocoding for yacht locations | Yacht place names / coordinates in tile and geocoding requests (no personal data) | European Union |
Changes to this list will be announced to workspace owners with reasonable advance notice as described in the DPA.