Subprocessor List
Last Updated: January 9, 2026
StaffTraq uses the following third-party service providers ("Subprocessors") to help deliver our services. These Subprocessors may process personal data on behalf of our customers in accordance with our Data Processing Agreement.
Infrastructure Subprocessors
These providers host and run our core infrastructure:
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Convex Privacy Policy | Database and backend services | United States | All application data (schedules, time entries, messages, etc.) |
| Vercel Privacy Policy | Web application hosting | United States | Application code, access logs, IP addresses |
Authentication Subprocessor
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Clerk Privacy Policy | User authentication and identity management | United States | Email, name, profile photo, password (hashed), session data |
Payment Subprocessor
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Stripe Privacy Policy | Subscription billing and payment processing | United States | Payment card information, billing address, email (Stripe is PCI DSS Level 1 certified) |
Communication Subprocessors
These providers help us communicate with users:
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Resend Privacy Policy | Transactional email delivery | United States | Email addresses, email content (notifications, password resets) |
Optional Integrations
These subprocessors are only used if you enable specific integrations:
| Subprocessor | Purpose | Location | When Used |
|---|---|---|---|
| No optional integrations currently available | |||
Changes to This List
We will update this list when we add or remove Subprocessors. Per our Data Processing Agreement, customers will be notified at least 30 days before we engage a new Subprocessor.
Change History
| Date | Change |
|---|---|
| January 9, 2026 | Initial subprocessor list published |
Subscribe to Updates
To receive notifications when we update our Subprocessor list, contact us at dpa@stafftraq.com with the subject line "Subprocessor Notifications".
Questions
For questions about our Subprocessors, contact:
StaffTraq Data ProtectionEmail: dpa@stafftraq.com
Address: [Your Business Address]
Alberta, Canada