Security and data
Sub-processors
Everyone else that touches a charity's data, what each one does, and where it processes it. Nothing else: everything Carefill does, it does itself.
| Processor | What it does | Where |
|---|---|---|
| Supabase | Postgres database, file storage and sign-in codes | London, UK |
| Vercel | Runs the web app | London, UK |
| Resend | Delivers email: shift offers, alerts, sign-in codes | United States |
| Microsoft | Signs staff in, through the charity's own tenant | The charity's tenant |
A charity, and its data protection lead, hears about a new sub-processor before it is added, and can object. That is in the processing agreement, not just on this page.
The transfer outside the UK — email delivery, which processes in the United States — is covered by the agreement too.
Last updated 1 November 2026.