Subprocessors
Effective date: November 1, 2025
PestMetry engages a limited number of trusted third-party service providers ("Subprocessors") to help deliver, secure, and support the PestMetry warehouse pest management and sanitation intelligence platform (the "Services"). This page lists each Subprocessor currently authorized to Process Customer Personal Data on our behalf, the purpose of the Processing, the categories of data involved, and the primary location where Processing occurs.
This list is provided in connection with, and forms part of, our Data Processing Addendum and Privacy Policy. Each Subprocessor is bound by written contractual obligations that require them to protect Personal Data at a level consistent with applicable Data Protection Laws, including, where relevant, the EU GDPR, UK GDPR, and applicable US state privacy laws. Where Personal Data is transferred outside the EEA, UK, or Switzerland, PestMetry relies on Standard Contractual Clauses or another lawful transfer mechanism as described in the DPA.
1. Core infrastructure
- Supabase, Inc.Managed Postgres database, authentication, object storage, and serverless functions powering the PestMetry application backend.Account credentials, customer-submitted operational records (work orders, pest incidents, sanitation activity, facility maps), uploaded files, and application logs.United States
- Amazon Web Services, Inc.Underlying cloud infrastructure (compute, storage, and networking) used by PestMetry's managed database and storage providers.All Personal Data and Customer Data at rest and in transit within the platform.United States
- Cloudflare, Inc.Global content delivery, DNS, TLS termination, edge runtime for the web application, and DDoS/WAF protection.IP addresses, request metadata, and static application assets served to end users.Global edge network (primary US)
2. Platform & authentication
- Lovable AI GatewayRoutes AI model requests used for in-product features such as text-to-speech dictation and content assistance. No customer data is used to train underlying models.Prompt content submitted by end users, generated audio, and request metadata.United States / EU
- Google LLCOptional Google Sign-In (OAuth) for authentication.OAuth profile identifiers (email, name, avatar) when a user chooses Google sign-in.United States
3. Communications
- Resend, Inc.Transactional email delivery (account verification, password resets, notifications, and blog subscription confirmations).Recipient email address, name, and message contents generated by the platform.United States
4. Affiliates
PestMetry may engage affiliated entities under common ownership and control as Subprocessors to support the operation, security, and delivery of the Services. Any such affiliate is subject to written obligations that are no less protective than those set out in our Data Processing Addendum.
5. Notification of changes
PestMetry will update this page whenever a Subprocessor is added, replaced, or removed. Customers with an active subscription may subscribe to Subprocessor change notifications by emailing support@pestmetry.com. Where required by the Data Processing Addendum, we will provide advance notice of new Subprocessors and offer Customers an opportunity to object on reasonable data-protection grounds before the new Subprocessor begins Processing Personal Data.
6. Right to object
If a Customer reasonably objects to a new Subprocessor on data-protection grounds, PestMetry will use commercially reasonable efforts to make a change to the Services or recommend a commercially reasonable alternative that avoids the objected-to Subprocessor's Processing of the Customer's Personal Data. If PestMetry is unable to make such a change within a reasonable period, either party may terminate the affected portion of the Services in accordance with the Agreement.
7. Contact
Questions about our Subprocessors?
Email support@pestmetry.com and our team will respond within a reasonable timeframe.