Sub-processors
These are the third parties Depot engages to process personal data on our customers’ behalf. This page is referenced by our Data Processing Addendum and our Privacy Policy, so that adding or replacing a vendor does not require amending either document.
The Depot application
- Supabase, Inc. — application hosting, database, file storage, and authentication. United States.
- Resend, Inc. — transactional email: sign-in codes, invitations, and operational notifications. United States.
- Functional Software, Inc. (Sentry) — crash and error diagnostics. United States.
- Capgo (Digital Solutions AG) — delivery of application updates; processes basic device and app-version information. Switzerland.
- Cloudflare, Inc. — content delivery and security for the web application. United States.
- Google LLC — Firebase Cloud Messaging, used to deliver push notifications to mobile devices. United States.
- Mapbox, Inc. — static map images for equipment locations; receives the equipment coordinates stored in Customer records for the asset being viewed. United States.
- Anthropic PBC — artificial-intelligence models that interpret text, images, and audio submitted to the Service. Engaged on commercial terms under which content sent through their API is not used to train their models. United States.
- OpenAI, L.L.C. — artificial-intelligence models that interpret text, images, and audio submitted to the Service. Engaged on API terms under which content sent through their API is not used to train their models. United States.
This website and sales enquiries
- Cloudflare, Inc. — website hosting, content delivery, server logs, and the Turnstile bot check. United States.
- Supabase, Inc. — database hosting for Depot’s internal sales and support system, where enquiries are stored. United States.
- Google LLC (Google Workspace) — email and document services used to correspond about enquiries. United States.
- Stripe, Inc. — payment processing for subscriptions. Stripe receives name, email, and payment details; Depot never receives or stores full card numbers. United States.
Not sub-processors
Where a customer connects their own telematics provider (for example Geotab) to Depot, that provider is the customer’s vendor, not a Depot sub-processor. Depot reads data from it at the customer’s direction and under the customer’s own agreement with that provider.
Changes to this list
We notify customers before a new sub-processor begins processing personal data, using the notice method set out in the Data Processing Addendum. A customer may object on reasonable data-protection grounds within the period stated there; if no objection is raised in that period, the new sub-processor is treated as approved.
Checking this page is not a substitute for that notice, and publishing a change here does not by itself start the objection period.
Contact
Questions about this list: [email protected].