Sub-processors
These are the companies that process data on our behalf so that Weave and this website can run. Each one is bound by a written agreement no weaker than our agreement with you. We will tell you by email before adding or replacing one, so you have time to object.
The Weave application
| Provider | What it does | Data it touches | Location |
|---|---|---|---|
| Vercel Inc. | Hosting the application and its scheduled jobs | Everything Weave processes, in transit | EU, Frankfurt (fra1) |
| Neon Inc. | The database: warehouse events, postings, exceptions, audit log, accounts | Everything Weave keeps | EU, Frankfurt (eu-central-1) |
| Microsoft Ireland Operations Ltd | Sign-in with a Microsoft work account (Entra ID) | Name, email address, account identifier | EU |
Being added
| Provider | What it will do | Data it will touch | Location |
|---|---|---|---|
| Postmark (ActiveCampaign LLC) | Sending notification email from Weave. Set up, not sending yet. | The recipient's address and the notice | United States |
This website
| Provider | What it does | Data it touches | Location |
|---|---|---|---|
| Vercel Inc. | Hosting this website, and counting page views without cookies | Server logs, including IP addresses | Vercel's global network |
| FormSubmit | Delivering the early-access form to our inbox by email | What you type in the form | To be confirmed |
Services you connect yourself
Slack, for exception notices in your own channel, and Klaviyo, for order events in your own account, are connected by you and act under your own agreement with them. So do Microsoft for Business Central and the operator of your warehouse system. None of them is our sub-processor.
Location
The Weave application and its database run in Frankfurt. Where a provider processes data in the United States or elsewhere outside the EEA, that transfer relies on the European Commission's standard contractual clauses.