RentTrust uses the processors below to run the Luxembourg pilot. Art. 28 terms for each provider were owner-approved on 14 August 2026. This register is not a GDPR certificate.
Processor register
| Processor | Purpose | Location | Art. 28 terms |
|---|---|---|---|
| Supabase | Database, authentication, and private document storage | Frankfurt, EU | Open the DPA |
| Vercel | Hosting and server execution | fra1, EU | Open the DPA |
| Resend | Transactional email | EU | Open the DPA |
| Stripe | Agency subscription billing | EU account | Open the DPA |
Transfers
Processing is configured for EU regions. Any residual support access from a processor follows the SCCs or equivalent terms in that processor’s DPA. Advertising processors are not used.
Review
This register is reviewed when a processor is added or a region changes. Tenant intake stays off until the remaining legal gates are approved in writing.
Not legal advice. Not CNPD approval. Not a claim of GDPR certification.