Sub-processors
TeamStride — Solidini
Version 1.0
Effective date: 7 October 2026
Last updated: 7 October 2026
1. About this list
1.1 Solidini provides TeamStride. For Customer Data, Solidini is a processor for the Customer, under the Data Processing Agreement ("DPA"). The DPA forms part of the Agreement under the Terms of Service ("Terms"). Capitalised terms have the meaning given in the Terms and the DPA.
1.2 A sub-processor is a company that Solidini engages to process Customer Data on behalf of the Customer.
1.3 This page is the authoritative list of sub-processors under the DPA (clause 11.2 of the DPA). Annex 3 of the DPA replicates it on the effective date of the DPA.
1.4 Each sub-processor is bound by a written contract with the same data protection obligations as the DPA. Solidini remains liable to the Customer for each sub-processor (clauses 11.4 and 16.5 of the DPA).
1.5 No sub-processor may use Customer Data to train artificial intelligence models. Solidini does not use Customer Data to train or fine-tune any model.
2. Current sub-processors
| Sub-processor | Purpose | Location of processing | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. (US) | Hosting of the web application, serverless functions, CDN, cookieless web analytics | Global edge network; functions in Frankfurt, Germany (fra1) | EU-US Data Privacy Framework (Vercel is certified) + SCCs in Vercel DPA |
| Supabase Inc. (US) | Database (PostgreSQL) hosting, backups | London, United Kingdom (AWS eu-west-2) | UK adequacy decision (EU 2021, renewed 19 December 2025); SCCs for any access from US |
| OpenAI, L.L.C. / OpenAI Ireland Ltd | Large language model that generates plans and assistant answers. API data not used for training; retained by OpenAI up to 30 days for abuse monitoring, then deleted | United States | SCCs (Module 3) in the OpenAI DPA |
| Resend (Plus Five Five Inc.) | Transactional email: sign-in links, invitations, billing notices | United States | EU-US DPF (Resend is certified) + SCCs in Resend DPA |
| Axiom Inc. | Application logs and error diagnostics (redacted: no email addresses, no free text) | EU (eu-central-1, Frankfurt) | EU processing; SCCs for any support access from US |
"SCCs" means the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914. "EU-US DPF" means the EU-US Data Privacy Framework.
3. Other recipients
| Recipient | Purpose | Location of processing | Role and transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe Ltd (Ireland) | Payments, subscriptions, invoices. Payment card and SEPA data is collected and held by Stripe only | EU and United States | Stripe acts as independent controller for payment data under its own terms; SCCs/DPF |
Stripe is not a sub-processor of Customer Data. Solidini lists it here for transparency.
4. Changes to this list
4.1 Solidini announces an intended addition or replacement of a sub-processor at least 30 days before the change takes effect.
4.2 Solidini sends the announcement by email to the Owner of every organisation, and publishes it on this page under "Announced changes".
4.3 The announcement states the name of the sub-processor, the purpose, the location of processing, the transfer mechanism and the date on which the change takes effect.
4.4 The Customer may object within the notice period on reasonable grounds relating to data protection, by email to privacy@getteamstride.com. If the parties find no solution, the Customer may terminate the Agreement and receives a pro-rata refund of prepaid Fees. Clauses 11.6 to 11.9 of the DPA apply.
4.5 In an emergency, such as a security risk, a breach of law or a sudden end of service by a sub-processor, Solidini may replace a sub-processor with a shorter notice. Solidini then gives notice as soon as possible. The objection period starts on the date of that notice (clause 11.10 of the DPA).
4.6 Solidini updates the "Last updated" line each time this page changes.
5. Announced changes
None.
6. Contact
Questions about this list: privacy@getteamstride.com.