Beacon
Sub-processors
The third parties that process customer personal data on our instructions to run Beacon, what each one does, and the safeguard that covers it.
Version 1.0. Last updated 19 October 2026.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage and scheduled jobs for the Beacon application. | Hosted in the EU (AWS eu-west-1, Ireland). | Data at rest stays in the EU. Supabase support access from outside the UK and EU is covered by the EU Standard Contractual Clauses and the UK Addendum. |
| Vercel Inc. | Hosting of the Beacon web application and its server routes. | Serverless functions run in Dublin (dub1); the edge network serves static assets worldwide. | EU Standard Contractual Clauses and the UK Addendum. |
| Resend Inc. | Delivery of transactional email: sign-in codes, invitations, approvals, digests and notifications. | United States. | EU Standard Contractual Clauses and the UK Addendum. |
| Anthropic PBC | Drafting, summarising and checking content and briefs on request (large language model API). | United States. | EU Standard Contractual Clauses and the UK Addendum. API inputs and outputs are not used to train Anthropic's models. |
| OpenAI, L.L.C. | Generating illustrations for posts when the image feature is used (image model API). | United States. | EU Standard Contractual Clauses and the UK Addendum. API inputs and outputs are not used to train OpenAI's models. |
| LinkedIn Ireland Unlimited Company | Publishing to LinkedIn Pages a workspace has connected, and reading that Page's post analytics, through the LinkedIn API. | Ireland and United States. | LinkedIn acts as an independent controller under its own terms once content is published. Transfers inside LinkedIn are governed by LinkedIn's own safeguards. |
Our source code is hosted with GitHub, Inc. (United States). No customer personal data is stored there. Payment processing, when it is introduced, will be added to this list before it is used.
We email workspace owners at least 30 days before adding or replacing a sub-processor, as set out in clause 7 of the data processing agreement. This list was last updated on 19 October 2026.
Questions about any of this are welcome. Write to privacy@pinpointproof.com or by post to PTR Consulting Ltd, 6th Floor, East Tower, Lanyon Plaza, 8 Lanyon Place, Belfast, BT1 3LP. We reply within five working days.