Drivora is in pre-launch and is not yet open for sign-ups or payments. Our registered company details and contact addresses will be published on this page before the service opens.
Sub-processors
Last updated: 9 October 2026
These providers process personal data for Drivora. They act only on our instructions, under written contracts that meet UK GDPR Article 28. Instructors and schools: this is also the list of sub-processors under our Data Processing Agreement. We give at least 14 days' notice of a new or replacement sub-processor by email and on this page, so you can object.
| Provider | What it does | Where the data is | Transfer safeguard for UK data | DPA |
|---|---|---|---|---|
| Supabase, Inc. (USA) | Database and file storage | AWS eu-west-1, Ireland. Support access may come from the USA. | Ireland: UK adequacy for the EU/EEA. US access: UK Addendum to the SCCs in the Supabase DPA. | supabase.com/legal/dpa |
| Railway Corporation (USA) | API servers, background jobs, Redis queue | Railway EU West region (Belgium). Company in the USA. | UK Addendum in the Railway DPA | railway.com/legal/dpa |
| Vercel Inc. (USA) | Website hosting and content delivery | Global edge network, functions in EU West | UK-US data bridge (Vercel states UK Extension certification) and IDTA in the Vercel DPA | vercel.com/legal/dpa |
| Clerk, Inc. (USA) | Sign-in, passwords, user accounts | USA | UK-US data bridge (Clerk certified for the UK Extension since February 2024) | clerk.com/legal/dpa |
| Resend, Inc. (USA) | Sending emails | USA | UK-US data bridge and UK Addendum / IDTA in the Resend DPA | resend.com/legal/dpa |
| 650 Industries, Inc. (Expo) (USA) | Routing push notifications to Apple and Google | USA | Under Expo service terms and privacy policy (expo.dev) | As per Expo terms |
| Apple (APNs) / Google (Firebase Cloud Messaging) | Delivering push notifications to iPhones and Android phones | Global | Under the platform terms. We keep notification text short and avoid sensitive detail. | Platform terms |
| Functional Software, Inc. (Sentry) (USA) | Error monitoring. Only listed once switched on. Not currently enabled. | EU or US, depending on the account region chosen | UK-US data bridge / UK Addendum | sentry.io/legal/dpa |
Independent controllers (not sub-processors)
| Organisation | Role |
|---|---|
| Stripe Payments UK Ltd / Stripe Payments Europe Ltd and affiliates | Processes card payments, saved cards, refunds and disputes, and verifies and pays instructors. Stripe is an independent controller for payment and identity data. See stripe.com/gb/privacy. |
Removed
- Twilio: removed. Drivora doesn't send SMS.
- PostHog: not used.