This page lists the third-party sub-processors Rezvion engages to provide the Service. It is published in line with Article 28(2) GDPR and our Data Processing Agreement. We notify controller customers at least 30 days in advance of additions or replacements.
Subscribe to changes by emailing partnerships@rezvion.nl.
1. Infrastructure
- Vercel Inc. — Hosting (EU primary; US parent). SCCs + DPF.
- Railway Corp. — API + PostgreSQL (EU). SCCs.
- Upstash Inc. — Redis (EU). SCCs.
- Cloudflare, Inc. — DNS, edge security, and object storage via Cloudflare R2 (menu photos, invoices, DSR export archives). SCCs + DPF.
- ClickHouse, Inc. — Analytics warehouse (EU). SCCs.
- Mapbox, Inc. — Geocoding and driving directions for the POS delivery route planner; receives the delivery address on each request (US). SCCs + DPF.
2. Payments
- Mollie B.V. — Payments via Mollie Connect; restaurants operate under their own merchant account (NL). EU establishment.
3. Restaurant integrations
- HubRise SAS — Delivery platform aggregation (FR). EU establishment.
4. Communications
- Resend, Inc. — Transactional email (EU + US). SCCs + DPF.
- Twilio Inc. — SMS (EU + US). SCCs + DPF.
5. Observability and AI
- Sentry — Error tracking (EU region). SCCs + DPF.
- OpenAI — Opt-in AI features; no training on API data (US). SCCs + DPF.
- Higgsfield AI, Inc. — Opt-in AI image and video generation for ad creative (US). SCCs + DPF.
6. Marketing connectors (only if customer connects)
- Google — Google Ads (EU + US). SCCs + DPF.
- Meta — Meta business APIs (Ireland). EU establishment.
- TikTok — TikTok Ads (EU + transfers under SCCs). SCCs + DPF.
Change log
- 27 September 2026 — added Higgsfield AI, Inc. (already referenced in our Privacy Policy) and Mapbox, Inc.; corrected the object-storage entry from AWS EMEA SARL to Cloudflare, Inc. (Cloudflare R2), which is the provider actually used.
- 9 May 2026 — page created.