Processors
Every provider that touches traffic or data on TAKESIT, in what role, and where. The list is short because the product is small: there is no database, no analytics, no advertising technology and no payment provider yet, and each of those will appear here before it appears in the code.
Vercel Inc.
PENDING_VERIFICATION
Hosting, build, CDN, serverless functions, request logs
- Data
- Technical request data: IP address, user agent, URL, timestamps, in platform logs
- Where
- Global edge; build in USA (iad1)
- Transfer
- USA, under the EU-U.S. Data Privacy Framework: Vercel Inc. is listed Active on the public register (EU-U.S., Swiss-U.S. and the UK extension), checked 2026-09-03
Neon, a Databricks company (Databricks, Inc.)
APPROVED
Database holding the waiting list (added 2026-09-08)
- Data
- Email address, whether the signup is a person or a brand, an optional company name, the consent version and its timestamp
- Where
- At rest: European Union, region eu-central-1 (Frankfurt). The region is asserted in code by EEA_REGIONS in waitlist-store.ts, which refuses to connect to a database hosted anywhere else
- Transfer
- USA, under the 2021 Standard Contractual Clauses incorporated in the Databricks Data Processing Addendum (art. 46). NOT the adequacy decision that covers Vercel: a different mechanism, requiring a signed agreement rather than a public register. The chain of subprocessors is largely US-based
Iubenda s.r.l.
PENDING_VERIFICATION
Consent banner, and the privacy and cookie notices linked from /privacy
- Data
- Consent choices and technical request data
- Where
- Italy (EU)
- Transfer
- None expected (EU)
Stripe Payments Europe, Limited (Ireland)
APPROVED
Card and SEPA payments: the stadium checkout and payment links for brand contract invoices (chosen 2026-09-14, test mode)
- Data
- What the buyer types on Stripe's page (email, card or IBAN, billing address), the amount, and as metadata the order and only the billing fields the buyer filled in
- Where
- European Union (Ireland) as contracting entity; USA (Stripe, LLC) and group affiliates
- Transfer
- USA, under the EU-U.S. Data Privacy Framework: Stripe, LLC, the US recipient named in Stripe's DPA, is listed Active on the public register (EU-U.S., Swiss-U.S. and the UK extension, renewal due 2027-05-11), checked 2026-09-15. Stripe's Data Transfers Addendum applies the DPF first and the 2021/914 SCCs if the certification lapses. There is no Stripe, Inc. on the register
Plus Five Five, Inc. (Resend), USA
APPROVED
Transactional email: the code that signs the onerous clauses of the terms of sale
- Data
- Email address of the person signing for a business; the message: code, terms version, clause numbers, link to the terms
- Where
- Sending from eu-west-1 (Ireland); primary processing in the USA, as Resend's DPA states
- Transfer
- USA, under the EU-U.S. Data Privacy Framework: Resend (Plus Five Five) is listed Active, re-certification under review, renewal due 2027-03-03, checked 2026-09-15. Resend's DPA adds the 2021/914 SCCs, module 2
TeamSystem S.p.A. (Fatture in Cloud), Pesaro, Italy
APPROVED
Electronic invoicing, issued by hand, and transmission to the Sistema di Interscambio
- Data
- The billing details of buyers who asked for an invoice and of brands: name or company, codice fiscale or partita IVA, address, SDI code or PEC, amounts and dates
- Where
- European Union (Ireland), on AWS
- Transfer
- Data at rest in Ireland. Exceptional access by AWS technical staff and sub-processors in the USA and other non-EEA countries for support, under the 2021/914 SCCs (art. 46.2.c), per TeamSystem's DPA of July 2026
The status is about the data-processing agreement, and only that: what makes a transfer lawful is on its own line above. PENDING_VERIFICATION means the provider is live and its processing agreement is being confirmed rather than assumed. DORMANT means the integration exists in the code and does not run until configured.