Sub-processor List
Reppl.sh uses a limited number of third-party service providers ("sub-processors") to deliver our website and services. In accordance with our Privacy Policy §7, we maintain this dated list and commit to providing advance notice of material changes. If you have questions or are a customer requiring a Data Processing Agreement, contact us at hello@reppl.sh.
We will update this page and the version date when we add, remove, or materially change a sub-processor. For processing of EU/EEA/UK/Swiss personal data, we aim to provide at least 30 days' advance notice before onboarding a new sub-processor for material data flows where this is feasible. If you object to a new sub-processor that processes your personal data, please contact us within that window.
| Processor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Formspree, Inc. | Receives and forwards form submissions (contact inquiries and Scorecard email-gate submissions) to our business inbox. | Name, email, company, role, Scorecard responses | US | Standard Contractual Clauses (EU); Formspree DPA available on request |
| Google LLC (Google Analytics 4) | Website analytics: pages visited, session duration, referral source, device and browser type. IP anonymisation enabled. Analytics data is consent-gated. | Anonymised usage data, approximate location (city/country) | US | Google Ads Data Processing Terms; EU SCCs for EEA data transfers |
| LinkedIn Ireland Unlimited Company | Advertising conversion tracking and retargeting via LinkedIn Insight Tag. Advertising cookies are consent-gated. | Hashed LinkedIn member data for campaign matching; aggregate audience insights | EU (Ireland) / US | LinkedIn Joint Controller Agreement; LinkedIn Privacy Policy governs member data |
| Calendly, LLC | Meeting scheduling for Diagnostic Calls. Processes booking data when a visitor self-schedules. | Name, email, meeting time preference | US | Calendly DPA; EU SCCs available via Calendly |
| Cloudflare, Inc. | Content delivery network (CDN), DDoS protection, and performance optimisation. Processes all web traffic transiently. | IP addresses (transient, not retained for analytics); request metadata | Global edge network | Cloudflare DPA; EU SCCs for EEA data; GDPR-compliant data processing commitments |
If you are an enterprise customer or a data controller who requires a Data Processing Agreement (DPA) with Reppl.sh, please email hello@reppl.sh with the subject "DPA Request." We will respond within 10 business days.