Subprocessors
Last updated: August 10, 2026
Pattn runs on infrastructure we operate ourselves and a small number of specialist services. This page lists every third party that may process customer data on our behalf, what each one is used for, and where it is hosted.
Pattn remains your point of contact and stays responsible for this data. Each provider is engaged under terms that limit it to processing data for the purpose described above, and not for its own.
In use today
| Service | What it does for us | What it processes | Where |
|---|---|---|---|
| Supabase | Database, authentication and file storage | All platform data: host and staff accounts, properties, reservations, guest contact details, uploaded photos and verification documents | Frankfurt, Germany (eu-central-1) |
| Vercel | Application hosting and content delivery | Request metadata, IP addresses, and any data submitted through the platform in transit | Frankfurt, Germany (fra1) |
| Tap Payments | Card processing, 3-D Secure authentication and bank settlement | Payment card details (entered on the provider’s own hosted page and never stored by Pattn), transaction amounts, payer name and contact, and the bank account and commercial registration documents a host submits for payout verification | Saudi Arabia |
| Resend | Transactional email | Recipient email address and message contents, such as booking confirmations and account notices | United States |
| OpenStreetMap and Carto | Map tiles and address lookup on listing pages | Property address and coordinates, and the IP address of the person viewing the map | European Union |
Conditional and inactive
These are integrated into the platform but only process data in the circumstances noted, or are not switched on in production at all. They are listed so the picture is complete rather than only current.
| Service | What it does for us | What it processes | Where |
|---|---|---|---|
| TTLock and TuyaOnly when a host connects a smart lock to their property | Remote smart-lock access codes | Property and lock identifiers, and generated guest access codes | Provider-dependent |
| TwilioNot currently active — not enabled in production | SMS and programmatic WhatsApp messaging | Phone numbers and message contents | United States |
| Meta (WhatsApp Business Cloud API)Not currently active — not enabled in production | WhatsApp Business messaging | Phone numbers and message contents | United States and Ireland |
Where your data is held
The platform database, file storage and application servers are all hosted in Frankfurt, Germany. Payment processing is performed in Saudi Arabia. Where a provider operates outside these regions, transfers are made under the safeguards required by applicable data protection law.
Changes to this list
We update this page when we add or remove a subprocessor. If you are a subscriber and would like advance notice of changes, email privacy@pattn.co and we will add you to the notification list.
Contact
Questions about how we handle data, or to request a copy of a data processing agreement: privacy@pattn.co.
See also our Privacy Policy, Terms of Service and Refund Policy.