Sub-processors
We use the following service providers to process Customer Personal Data on behalf of merchants using EPR One. We require confidentiality and security commitments from each sub-processor.
| Vendor | Role | Region(s) used |
|---|---|---|
| Salesforce Heroku (incl. Heroku Postgres/Redis) | App hosting & DB | EU (Ireland/Frankfurt) |
| Amazon Web Services (S3) | Object storage (exports, backups) | EU (Ireland/Frankfurt) |
| Grafana Cloud | Centralised logs/metrics | EU region (e.g., Frankfurt) |
| Sentry | Error monitoring | EU region (Frankfurt) |
| Help Scout | Help desk / support ticketing (merchant contact data & support content only) | United States (SCCs under Help Scout DPA) |
Change-notice policy
We will provide at least 30 days’ notice for material changes to this list. If you reasonably object to a change, please contact support@epr-one.com; if unresolved, you may terminate the impacted service pro-rata.
Note: Our marketing site on Vercel does not process Customer Personal Data on your behalf. See our Privacy Policy and DPA for details.