Preparing your workspace

Last updated September 5, 2026

Subprocessor Register

Revision 2026-09-05-draft.1

Draft pending UK specialist review. Not yet a contract.

These documents describe the agreement Tandem intends to offer. Three things are still outstanding: the supplying company’s registered identity and contact details, a signed data processing agreement, and the liability, indemnity and governing-law terms. Until those are settled, acknowledging a notice records only that you read it. It does not form a contract, authorise a charge, or constitute approval for launch.

You can raise a data protection concern with the Information Commissioner’s Office at ico.org.uk/make-a-complaint at any time.

Tandem Subprocessor Register Version 2026-09-05-draft.1

Draft for product-owner and UK specialist review. This revision does not authorise paid launch or replace a signed customer agreement.

The contracted subprocessor register is pending verification for the launch environment. No vendor is approved by this draft. The register must state vendor legal identity, processing purpose, data categories, locations and applicable transfer safeguards.

The repository uses Supabase libraries for database, authentication and storage, and includes integrations for Stripe payments and Resend email. These implementation references are not proof of a live provider contract, enabled environment or processing location. Hosting, mobile push, mapping, monitoring and other configured services also require an actual processing inventory.

The signed data processing agreement must define subprocessor authorisation, advance notice of changes and the objection process. Confirm the register and contracted safeguards before customer data is processed in a launch environment. Do not infer approval from a user's acknowledgement of this page.