Subprocessors & DPA

The providers that handle data so Respondo can run, and how to put a data processing agreement in place.

Last updated September 24, 2026.

Subprocessors

When you run surveys with Respondo, we process your respondents’ answers on your behalf. These providers help us do it:

ProviderPurposeDataLocation
SupabaseDatabase and sign-inAccounts, surveys, responsesIreland (EU)
VercelServing the app and its APIRequests in transitGlobal edge network

When this list changes

We will update this page before a new subprocessor starts handling your data, and email account holders who have signed a DPA, at least 30 days ahead. If you object to a new subprocessor, tell us; if we cannot address it, you may end your agreement before the change takes effect.

Data processing agreement

If you need a DPA — for example to meet the GDPR when you survey people in the EU — email support@myrespondo.com with “DPA” in the subject and your company’s legal name. We will send one to sign.

In outline, it commits us to:

  • Process survey data only on your instructions, to provide Respondo.
  • Keep it confidential, and limit who can reach it.
  • Use only the subprocessors listed here, under equivalent terms.
  • Help you answer requests from the people you surveyed.
  • Tell you without undue delay if a breach affects your data.
  • Delete or return the data when you stop using Respondo.

How we protect it is on the security page; what we collect is in the privacy policy.