Vendors & Overseas Storage Register
Version 1.0 · Effective 19 June 2026
Third parties that process data on our behalf and where they store it.
This register lists the third-party service providers ("sub-processors") that may process personal information on our behalf, what they do, and the country where data is stored or processed. It supports our overseas-disclosure obligations under APP 8. Update this table whenever you add, remove or change a provider.
Sub-processors
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| [Hosting provider] | Application hosting, database & file storage | All account & activity data | [Country — e.g. Australia] |
| Resend | Transactional & notice email delivery | Email address, message content | United States |
| Zippopotam.us | Postcode → city/coordinates lookup (optional feature) | Postcode only (no account identifier) | Overseas (varies) |
| Nager.Date | Public-holiday lookup (optional feature) | Country/region code only (no personal data) | Overseas (varies) |
Overseas storage
Where a provider is located overseas, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles, including through contractual protections. The optional geocoding and public-holiday lookups can be disabled by the operator to avoid any overseas calls.
Questions
For questions about this register, contact [email protected]. See also our Privacy Policy.