Data processing subcontractors
Below we list every provider to which Kamil Truszkowski, the seller of the CAVOR Desk service, entrusts data processing in delivering the service. We update this list whenever a provider changes.
Your position in this chain depends on who you are. If you are our client — a property manager or a service company — then for the data you enter into the system we are the processor, and the providers in the table are our subprocessors. If you are a resident, the controller of your data is your housing community or cooperative, the property manager is the processor, we are its subprocessor, and the providers in the table are a further link in the same chain.
List last updated: 2026-10-29
| Provider | Purpose of processing | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database hosting, user authentication and photo storage | Frankfurt am Main, Germany (EEA); Singaporean company | SCC |
| Vercel | Application hosting and server logs | Frankfurt am Main, Germany (EEA); US company | SCC |
| Resend | Transactional email — notifications and invitations | US company (USA) | SCC · DPF |
Transfers outside the European Economic Area
Vercel and Resend are US companies, and Supabase is a Singaporean company. Even when the data sits on servers in Europe, access by support staff at headquarters and the transmission of metadata outside the European Economic Area constitute a transfer. We say so explicitly, because a European server region on its own does not rule it out.
These transfers rely on the Standard Contractual Clauses (SCC) approved by the European Commission — applied to the providers outside the EEA — and, in Resend's case, additionally on the EU-U.S. Data Privacy Framework (DPF); both mechanisms are provided for in Chapter V of the GDPR. In the table we mark them as “SCC” or “SCC · DPF”, depending on the provider.
On request we will send you information about the safeguards applied to a specific provider. Write to kontakt@cavor.eu.
Every change to this list — a new provider, or dropping an existing one — appears on this page together with the update date. This page is the only place where we maintain the list.
The Polish version of this list is authoritative. In case of any discrepancies between the translation and the Polish original, the Polish version shall prevail.