Sub-processors

In use today

• Supabase — database and authentication. Hosted on AWS, Europe (Paris, eu-west-3).
• Oracle Cloud Infrastructure — application server, France Central region (Paris, eu-paris-1), and encrypted backup storage (Oracle Object Storage).
• Resend — transactional email: invitations, reminders, password resets. Sent from the Europe region (Ireland, eu-west-1). Those emails carry an address and a link, never the content of a response.
• OpenAI — language-model provider, used for the “automated feedback review” (when the organization has chosen it and the coach launches it) and for the automatic translation of questionnaires when they are published. Details below.

Present but not switched on

These appear in the code but process no data today. This page will be updated before any of them is enabled:

• Report PDF storage — PDF reports are not switched on; no report is stored as a file.
• Sentry — error reporting. No key is configured.
• Stripe (Stripe Payments Europe, Ltd., Ireland) — online payment for a coach buying a pack, or an individual buying a credit, on Stripe's own payment page. No key is configured: until one is, no data is sent to Stripe. Once switched on, Stripe receives the buyer's e-mail address, the amount, the billing address and, if given, the business name and VAT number, and handles the payment data itself; the platform only receives the confirmation and keeps neither the billing address nor the VAT number. Stripe may process data outside the European Union, on the basis of standard contractual clauses.

OpenAI — automated feedback review and translation of questionnaires

Automated review: no data is sent to OpenAI until an organization has chosen the automated review and set a monthly budget. The coach can then ask for a campaign to be analysed; in an organization run by a coach it is asked for automatically when the campaign enters review; for an individual client it happens by itself before the report is published. Translation: the text of a questionnaire is sent each time a version is published, with no choice to make and independently of that budget.

• Purpose: (1) group the recurring themes of a campaign's free-text comments, for the coach, who reads and validates; (2) translate a questionnaire into the other language (French or English) when a version is published; (3) write a draft questionnaire from the description an administrator typed.
• Data sent for the review: the text of the comments and questions and group averages, after removal as far as possible of e-mail addresses, phone numbers and names. No identity, no response identifier, no response date.
• Data sent for the translation: the text of the questionnaire written by the organization (section titles, questions, help texts, answer options, scale labels), which contains no respondent data. Comments and answers are never sent to be translated.
• Data sent to write a questionnaire: only the description an administrator typed, after removal as far as possible of e-mail addresses, phone numbers and secret keys. It is erased once the writing is done.
• What we keep: for the review, neither the text sent nor the model's answer; for the translation, the translated questionnaire, which we keep to show it to respondents. In both cases the call ledger records only the provider, the model, the token counts, the cost and the outcome.
• Location: the contract is with OpenAI Ireland Ltd; the text may be processed in the United States, outside the European Union.
• Retention by the provider: under its published terms, up to 30 days for abuse-monitoring logs, with longer retention possible for legal or safety reasons. The OpenAI organization used does not have zero data retention; we nevertheless set store to false to disable response storage. This does not prevent retention in abuse-monitoring logs.
• Transfer safeguard: a data-processing agreement (DPA) was signed with OpenAI Ireland Ltd on 5 October 2026. Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses or an adequacy decision (GDPR Article 45). OpenAI publishes the list of its own sub-processors at platform.openai.com/subprocessors.
• Erasure: deleting a comment from this site after sending does not delete the provider's retained copy.

Transfers outside the European Union

Emails are sent from within the European Union (Ireland). Because Resend is established in the United States, access from the United States cannot be ruled out; it is covered by the European Commission's standard contractual clauses. For OpenAI, see the section above.