Skip to main content
OSBase

Sub-processors

OSBase is provided by Inteeka Ltd. When your organisation uses OSBase, we process personal data on its behalf. To provide the service we use the third parties below ("sub-processors"). This page says what each one does, what personal data it handles and where.

Last updated: 5 October 2026

Sub-processors we use

  • Vercel Inc. — hosts the OSBase application and delivers its pages. Personal data: everything sent to and from the application, including names, e-mail addresses and IP addresses. Where: London, United Kingdom (application servers); a global edge network delivers pages and static files.
  • Supabase Inc., on Amazon Web Services — databases, sign-in and file storage. Personal data: all data held in OSBase. Where: Ireland (main platform, Print Portal and Signage); Mailroom data in Frankfurt, Germany.
  • Postmark (ActiveCampaign, LLC) — sends OSBase's e-mails, and receives e-mail for the Print Portal inbox where it is switched on. Personal data: names, e-mail addresses and message content. Where: United States.
  • Stripe — takes payment for OSBase subscriptions. Personal data: billing contact and organisation details; card details go directly to Stripe. Where: United States and Ireland.
  • Google LLC — reCAPTCHA (protects sign-in and public forms from automated abuse); Sign in with Google (if you choose it); Gemini (optional product-image generation in Print Portal, only where switched on). Personal data: reCAPTCHA — IP address and browser signals; Sign in with Google — name and e-mail; Gemini — product text and reference images. Where: United States / global.
  • Anthropic, PBC — optional AI features in Print Portal (shopping assistant, quote suggestions), only for organisations where they are switched on. Personal data: the text of the request and a pseudonymous user reference. Where: United States.
  • Inteeka Ltd — a feedback tool our own staff use to report problems. Personal data: screenshots of the page being reported, and the reporter's name and e-mail. Where: London, United Kingdom (application); we are confirming the storage location and will update this page.

Planned — not in use

We are building an AI phone line for Print Portal. It would use Vapi, Twilio, Deepgram and ElevenLabs. None of them processes any OSBase data today. We will add them to the list above, with at least 30 days' notice, before they do.

Recipients you choose

Some features send data to places your organisation chooses. These are not our sub-processors: your organisation decides to use them and is responsible for that relationship.

  • Cloud storage you connect for artwork exports — for example SharePoint, Box, Dropbox or Amazon S3.
  • Print suppliers you appoint, who receive the order details they need to fulfil your orders.
  • Content you embed in Signage, such as dashboards or news feeds, which the screen loads from its source.

Get notified of changes

We give at least 30 days' notice before a new sub-processor starts processing your organisation's personal data. To be told, e-mail privacy@osbase.io with the subject line "Subscribe: sub-processor changes". If you have a reasonable data-protection objection to a change, tell us within those 30 days; our Data Processing Agreement, available on request from privacy@osbase.io, explains what happens next.

Questions

E-mail privacy@osbase.io.