Subprocessors
Last updated: December 27, 2025
This page lists the third-party subprocessors that Agricultable engages to process personal data on behalf of our users. We carefully select subprocessors that maintain high security and privacy standards, and we require them to comply with applicable data protection regulations including GDPR.
What is a Subprocessor?
A subprocessor is a third-party service provider that processes personal data on behalf of Agricultable. When you use our platform, your data may be processed by these subprocessors to provide essential services such as database hosting, payment processing, and mapping functionality.
Current Subprocessors
The following is a complete list of subprocessors currently engaged by Agricultable:
Supabase, Inc.
InfrastructureStripe, Inc.
PaymentsOpenStreetMap Foundation
MappingData Processing Agreements
We have entered into data processing agreements (DPAs) with each of our subprocessors that include:
- Obligations to process data only on our documented instructions
- Requirements to implement appropriate security measures
- Restrictions on engaging additional subprocessors without notice
- Obligations to assist with data subject rights requests
- Requirements for data deletion upon termination of services
- Standard Contractual Clauses (SCCs) for international transfers where required
International Data Transfers
Some of our subprocessors are located outside the European Economic Area (EEA). For these transfers, we ensure appropriate safeguards are in place:
- Supabase: EU-US Data Privacy Framework certified, Standard Contractual Clauses
- Stripe: EU-US Data Privacy Framework certified, Standard Contractual Clauses, Binding Corporate Rules
- OpenStreetMap: UK-based foundation with GDPR compliance
Changes to Subprocessors
We may update this list when we engage new subprocessors or discontinue existing ones. We will notify users of material changes through:
- Updates to this page with a new "Last updated" date
- Email notification to registered users for significant changes
- In-app notifications when required by applicable law
If you object to a new subprocessor, please contact us within 30 days of the notification. We will work with you to address your concerns or provide alternative arrangements where feasible.
Your Rights
Under GDPR and other applicable data protection laws, you have rights regarding your personal data processed by our subprocessors. These include:
- Right to Access: Request information about which subprocessors process your data
- Right to Rectification: Correct inaccurate data held by subprocessors
- Right to Erasure: Request deletion of your data from our systems and subprocessors
- Right to Object: Object to certain processing activities
- Right to Data Portability: Receive your data in a portable format
To exercise these rights, please contact us at privacy@agricultable.com
Contact Us
If you have questions about our subprocessors or how your data is processed, please contact:
Agricultable, Inc.
Data Protection Officer
123 Farm Road, Louisville, KY 40202
Email: privacy@agricultable.com
Phone: (555) 123-4567