Sub-processors
Version 2026-10-02. A lawyer is reviewing this document; any change is posted here with its date before it applies.
Prytan, [Company name, kennitala, registered address, Iceland], uses a small number of other companies to run the service. A company that handles personal data for Prytan is a sub-processor. This page lists every one of them. It belongs to the data-processing terms. Questions: support@prytan.ai.
1. Prytan's sub-processors
| Name | Contracting company and its country | Where the data sits | What it does for Prytan | What covers a transfer outside the EEA |
|---|---|---|---|---|
| Supabase | Supabase Pte. Ltd, Singapore | Frankfurt, Germany (EU) | the database, and the sign-in of business owners | the European Commission's standard contractual clauses |
| DigitalOcean | DigitalOcean, LLC, USA | Amsterdam, Netherlands (EU) | the server, its disk and the encrypted backups on it | the EU-US Data Privacy Framework, with standard contractual clauses as the fallback |
| Resend | Plus Five Five, Inc., USA | sent from Ireland (EU); stored in the USA for 30 days | every email Prytan sends: sign-in links and codes, booking emails, alerts | the EU-US Data Privacy Framework and standard contractual clauses |
| 46elks | 46elks, a Swedish company (EU) | Sweden (EU) | text messages. Switched off: no data goes to it | none needed |
Each sub-processor is bound by a written contract to the same data-protection duties that Prytan owes. Prytan stays responsible for what they do.
Not sub-processors. Prytan uses no advertising, analytics or tracking company. Prytan sends no personal data to an AI provider of its own.
2. The booking systems
A business's booking system is not Prytan's sub-processor. It is the business's own provider, and Prytan sends a booking to it on the business's instruction. They are listed here so that everyone can see where a booking goes.
| Booking system | Company | Where it stores data |
|---|---|---|
| Noona | an Icelandic company | Amsterdam, Netherlands |
| Cal.com | a company in the USA | the USA |
| Cliniko | an Australian company | the region the business chose: Australia, the United Kingdom, Canada or Ireland |
| SimplyBook.me | a Cypriot company | Canada, France and Singapore |
| Square | for European businesses Squareup International Ltd, Ireland | the USA, the EU and elsewhere |
| Acuity | for businesses outside the USA Squarespace Ireland Limited | the USA |
The AI a person uses, and the AI a business owner connects, are their own choice. Their providers are not Prytan's sub-processors either.
3. How changes are announced
We email every business account at least 30 days before we add, replace or switch on a sub-processor. The change is written into the list below on the same day. A business may object in writing, and may leave before the change applies if we cannot resolve the objection. People who book are told through the privacy policy for people who book.
4. Changes to this list
| Date | Change |
|---|---|
| 2026-10-02 | First published as its own page. Before this date the list was part of the terms. No sub-processor was added or removed. |
Questions: support@prytan.ai. Report a bug.