What the pages sayOkara's subprocessors page lists 12 vendors with their locations, but does not specify which subprocessors process EU customer data or whether Standard Contractual Clauses (SCCs) are in place. The subprocessor table shows: AWS (Singapore, United States), Vercel (United States), Replicate (United States), Stripe (United States, Ireland, Singapore), ConvertKit (United States), Resend (United States), Google Analytics (United States), Rewardful (United States), Twitter Pixel (United States), Reddit Pixel (United States), Google Ads (United States), Supabase (United States), and Upstash (United States). Only Stripe lists Ireland as a location, which could indicate EU data processing, but this is not explicitly confirmed.
The fixAdd a column to the subprocessor table indicating which vendors process EU customer data, and explicitly state whether Standard Contractual Clauses (SCCs) are in place with each subprocessor. Consider adding a dedicated GDPR/data transfer section to the subprocessors page.
Where we looked: /subprocessors