Data processing overview

Last updated: July 2026

MySafeOps is designed so that your organisation decides what operational and personal data is entered into the system. When you use optional cloud features, we engage processors to deliver that infrastructure.

1. Subprocessors (cloud)

Depending on how your environment is configured, processing may include:

• Vercel — static hosting and CDN for the web application
• Supabase — authentication, database, storage, and related APIs for cloud-backed accounts and backups
• Cloudflare — CDN, Turnstile bot protection, and (if enabled) Workers, D1, and R2 object storage
• Stripe — payment processing when billing is enabled
• Optional: Sentry (error monitoring) when configured for a deployment

The exact list in your contract or order form takes precedence over this summary page.

2. Data Processing Agreement (DPA)

UK GDPR customers who need a signed DPA or UK Addendum should contact us at privacy@mysafeops.com with your company name, billing contact, and intended use. We will provide the current template for review.

3. International transfers

Where personal data is processed outside the UK, we rely on appropriate safeguards (for example the UK International Data Transfer Agreement / Addendum) as reflected in the DPA we agree with your organisation.

4. Related documents

See also our Privacy policy, Terms of service, and Accessibility statement on this site.