Subprocessors
Last updated: 2026-06-26
Gater engages a limited set of vetted subprocessors to deliver the service. Each is bound by a Data Processing Agreement under GDPR Article 28 and the relevant Standard Contractual Clauses where applicable.
Current subprocessors
| Provider | Purpose | Data location | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. (via Lovable Cloud) | Database, auth, storage, realtime | EU (Frankfurt) | EU — no transfer |
| Cloudflare, Inc. | CDN, DDoS protection, edge compute | EU edge nodes | SCCs (2021/914) |
| Stripe Payments Europe, Ltd. | Payment processing | EU (Ireland) | EU — no transfer |
| Google Ireland Ltd. (Gemini AI) | AI question generation, scoring assistance | EU endpoints where available | SCCs (2021/914) |
| Resend, Inc. | Transactional email delivery | EU | SCCs |
| Lovable (operator of platform) | Hosting orchestration | EU | EU — no transfer |
Change notice
We will notify customers at least 30 days before adding or replacing a subprocessor. Customers may object on documented data-protection grounds; if we cannot accommodate the objection, the customer may terminate the affected service for the period concerned.
Contact
Questions about subprocessors: dpo@gater.app.
Questions? Email privacy@gater.app.