Sospita Software uses selected third-party service providers to operate, secure and support its products and services. The providers used by a particular product may vary depending on the features enabled. This page identifies material providers involved in processing service data on behalf of Sospita or its customers.
Legal
Subprocessors and Service Providers
Version 1.0 · Effective 2026-10-31
Infrastructure & Hosting
Amazon Web Services (AWS)
- Purpose
- Hosting, compute, storage and related infrastructure for Sospita services where used.
- Primary processing / hosting region
- EU regions
More details
- Data categories
- Application and service data hosted on AWS infrastructure.
- Provider role
- Service provider (processor / subprocessor)
Render
- Purpose
- Backend and application hosting.
- Primary processing / hosting region
- EU (Frankfurt)
- Applicable services
- Sospita Athletic Performance, Sospita HSE Platform, Incident Investigation / HSE Platform AI features
More details
- Data categories
- Account, application and service data processed by hosted backend services; request and log metadata.
- Provider role
- Service provider (processor / subprocessor)
Cloudflare
- Purpose
- Corporate website delivery and hosting (Cloudflare Workers), security and anti-abuse protection, including Cloudflare Turnstile for form protection.
- Primary processing / hosting region
- Global edge network. Requests may be processed at Cloudflare locations worldwide, generally the location nearest the visitor.
- Applicable services
- Sospita corporate website
More details
- Data categories
- Website request metadata such as IP address, browser and device information; security and bot-detection signals, including signals processed by Turnstile when a form is used.
- Provider role
- Service provider (processor / subprocessor)
Database & Storage
Supabase
- Purpose
- Database, authentication and file storage for the Sospita corporate website and its content management system.
- Primary processing / hosting region
- EU region
- Applicable services
- Sospita corporate website
More details
- Data categories
- Website contact and demo-request submissions, privacy requests, administrator accounts, website content and, where visitors allow analytics, first-party website analytics events.
- Provider role
- Service provider (processor / subprocessor)
Google Cloud Platform / Google Cloud Storage
- Purpose
- Storage of uploaded files, media and generated documents, and related infrastructure where used.
- Primary processing / hosting region
- EU region
- Applicable services
- Sospita Athletic Performance, Sospita HSE Platform
More details
- Data categories
- Uploaded files and media, such as photographs, documents, attachments and generated reports.
- Provider role
- Service provider (processor / subprocessor)
Communications
SendGrid
- Purpose
- Delivery of service emails where used.
- Primary processing / hosting region
- Provider-managed; processing may take place outside the EU.
More details
- Data categories
- Recipient email addresses and the content of service emails.
- Provider role
- Service provider (processor / subprocessor)
AI Services
OpenAI
- Purpose
- Processing prompts required to provide AI-assisted features, including Athletic Performance coaching and evaluation functionality and Incident / HSE AI functionality.
- Primary processing / hosting region
- Provider-managed; processing may take place outside the EU, including in the United States.
- Applicable services
- Sospita Athletic Performance, Incident Investigation / HSE Platform AI features
More details
- Data categories
- Information included in AI requests for enabled AI features, such as training, attendance and performance information for coaching, and incident information supplied for incident-analysis support. Apple HealthKit and Android Health Connect values and the health indicators derived from them are not included.
- Provider role
- Service provider (processor / subprocessor)
Analytics & Security
Sentry
- Purpose
- Crash reporting, diagnostics, performance monitoring and diagnostic session replay for the Sospita SafeGuard mobile application.
- Primary processing / hosting region
- EU (Germany)
- Applicable services
- Sospita SafeGuard mobile app
More details
- Data categories
- Crash and error information, device and app information, IP address and network metadata, diagnostic logs, performance traces, and diagnostic session replay data.
- Provider role
- Service provider (processor / subprocessor)
Subscription & Payment Services
RevenueCat
- Purpose
- Managing subscription status, purchases, entitlements and access to paid app features.
- Primary processing / hosting region
- Provider-managed; processing may take place outside the EU, including in the United States.
- Applicable services
- My Checklists, Sospita Risk Assessment, Sospita Athletic Performance
More details
- Data categories
- App user identifiers, purchase and subscription records, and entitlement status.
- Provider role
- Service provider (processor / subprocessor)
iyzico
- Purpose
- Secure card payment processing for Sospita SafeGuard web subscriptions. Payment-card details are entered directly into iyzico’s payment interface; Sospita does not receive or store customers’ full card details.
- Primary processing / hosting region
- Türkiye
- Applicable services
- Sospita SafeGuard — web subscription payments
More details
- Data categories
- Billing contact name, email address, mobile phone number where required, billing address, Turkish identity number for individual billing where required, company tax number and tax office where applicable, and subscription and transaction references.
- Provider role
- Payment service provider
This content is managed by Sospita Software and is not legal advice.