Subprocessors and suppliers

This page outlines services used in Monoplan's technical solution. It does not state that all agreements, processing locations and transfer safeguards have been fully verified. It does not replace the specific subprocessor list attached to a customer's data processing agreement.

Core services

• Convex: backend, database, realtime features and file storage.
• Clerk: login, invitations, sessions and authentication.
• Cloudflare: delivery and protection of websites and applications.
• Resend: transactional email delivery and status.
• Stripe: subscriptions, payments and billing. Stripe may have independent purposes, such as payment checks; not all processing is subprocessing for the customer.

Other recipients depend on features and choices

Push messages travel through browser and mobile platform delivery services and, where applicable, Expo. Product analytics and error signals may use PostHog. Optional website measurement uses Google Analytics and, with a separate choice, OpenAI ad measurement. See the cookie policy.

Customer-directed integrations, map services and operational or support tools must be assessed according to the specific feature and data received. A customer's own payroll service is not automatically CommonStudios' subprocessor. AI models and routing require separate agreement and scope; this overview does not approve an AI recipient chain.

Entity, location and transfers

The contracting entity, account configuration, support access and onward suppliers can vary by service. An EU database region does not itself demonstrate that all support, backups and other processing stay in the EU/EEA. Recipients may be outside the EU/EEA.

Contact contact@monoplan.io for the agreement-specific list, relevant locations and evidence of transfer safeguards. Unresolved matters remain identified as unresolved; we do not give a general EU-only, certification or contractual-clause guarantee without the relevant evidence.

Changes and objections

Notice, authorisation and objections follow the executed data processing agreement. Updating this page is not itself customer authorisation of a new subprocessor. Supplier questions can be sent to the contact address above.