← GDPR & Data
GDPR & Data
Subprocessor List
Current sub-processors engaged by Oncommerce Limited to provide InstaSurv. Categories and locations may change; material updates will be reflected on this page.
Last updated: 21 August 2026
1. Overview
We use carefully selected providers to host infrastructure, store files, send transactional email, process payments, and support authentication and product operations. Each provider processes data only as needed for their service and under contractual safeguards.
2. Current subprocessors
The following categories apply to production InstaSurv:
- Hosting & application delivery — Vercel Inc. (edge/application hosting). Typical processing region: EU/US as configured for the deployment.
- Managed PostgreSQL database — Neon (serverless Postgres). Customer Data at rest in the configured database region (prefer EU where available).
- Object / blob storage — Vercel Blob (and related Vercel storage) for uploaded images and attachments.
- Payments — Stripe Payments Europe / Stripe, Inc. for subscription billing and related payment data (card data handled by Stripe).
- Transactional email — Resend and/or SMTP providers configured for the deployment, for quotes, invoices, report links, and service notices.
- Optional calendar integrations — Google (Calendar API) when a practice connects Google Calendar for scheduling sync.
3. Updates
We maintain this list as our operating stack evolves. For questions: support@instasurv.co.uk.
See all documents in GDPR & Data, or our Privacy Policy.