Subprocessors

Third-party service providers

Last Updated: February 4, 2026

We will notify customers of any changes to this list via email at least 30 days in advance.

This page lists the third-party service providers ("Subprocessors") that GuestlistOnline uses to provide our Services. All Subprocessors are subject to data processing agreements and appropriate security measures to protect your data.

GDPR Compliance

All Subprocessors who process data outside the EU operate under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring GDPR-compliant data transfers.

Infrastructure & Hosting

Supabase

Database and Authentication Services

Location: European Union

AWS eu-central-1 (Frankfurt, Germany)

Purpose:

Database hosting, user authentication, real-time data synchronization, and file storage for our platform.

Data Processed:

All personal data including user accounts, events, guest lists, and check-in records.

Data Residency:

✓ EU-only storage

Vercel

Application Hosting and Edge Network

Location: Multi-region

EU users routed to Frankfurt, Germany

Purpose:

Application hosting, serverless functions, and content delivery via edge network.

Data Processed:

Request data, session information, and temporary processing of data during API calls.

Data Residency:

EU routing for EU users SCCs in place

Payment Processing

Stripe

Payment Processing

Location: Global

EU, United States, and other regions

Purpose:

Payment processing, fraud prevention, and financial transaction handling for paid events.

Data Processed:

Payment information, billing details, and transaction records. Card details are tokenized and not stored by GuestlistOnline.

When Used:

Only for paid events SCCs in place

Communications

Hostnet

Email Delivery (SMTP)

Location: European Union

Netherlands

Purpose:

Delivery of transactional emails including invitations, QR codes, confirmations, and notifications.

Data Processed:

Email addresses, names, and email content (invitations, event details).

Data Residency:

✓ EU-only

Changes to Subprocessors

GuestlistOnline will notify customers of any intended changes to Subprocessors (additions or replacements) at least 30 days in advance via email. Customers may object to new Subprocessors within this period.

If you object to a new Subprocessor and we cannot accommodate your objection, you may terminate your agreement with us in accordance with our Terms of Service.

Questions or Concerns

For questions about our Subprocessors or data processing practices, please contact:
Email: go@guestlistonline.com

Start for free today

Ready to streamline your event management?

Join thousands of organizers who trust GuestlistOnline for their events. Get started in minutes — no credit card required.

Free for small events No credit card required GDPR compliant