Skip to content

Subprocessors

Last updated 5 October 2026 · Version 1.0. Written in plain words from how Sitecomb works, and not yet reviewed by a solicitor.

These are the companies that handle visitor or customer data for Sitecomb, what each gets, and why. This is the list the data processing agreement and the privacy notice refer to.

Who helps us run Sitecomb?

Each one only gets what it needs for its job. "Their data terms" is the provider's own data processing agreement or privacy page.

ProviderWhat it getsWhyWhereTheir data terms
Vercel Inc.The IP address and browser details of everyone who visits. For buyers, the website address, business name and email address while an order runs.Runs this website and its servers.Vercel's global network. See their data terms for regions.Vercel DPA
Vercel BlobOrders (website address, business name, email address, status), stored reports, saved free-score answers, limit counters, waiting-list entries and counts.Private storage for the above.See their data terms for regions.Vercel DPA
Vercel Web AnalyticsOnly if you click Accept on the banner: the page, where you came from, your country and device type, as anonymous totals.Counting visits.See their data terms.Vercel DPA
Stripe (merchant of record)Your email address and payment details (which you give on Stripe's page; we never see your card number), and what you ordered: the website address, business name, currency and, if you came from the free score, a source label.Takes payments as the seller of record, handles tax, fraud checks and refunds.Stripe's global network. See their data terms.Stripe DPA
ResendYour email address and the text of the emails we send you (your report link, receipt, refund notices). Also our own alert emails.Delivers our email.See their data terms for regions.Resend DPA
Fly.ioThe public website address being checked, and the public pages the checker reads. The result goes back to us.Runs the checker, in a browser, on our behalf.London, United Kingdom.Fly.io data processing
Google (Web Risk)The website address being checked.Asks Google's unsafe-sites list whether the site is flagged.Google's global network.Google Cloud DPA
Google (Public DNS)The website's domain name.Looks up the domain's security records.Google's global network.Google Public DNS privacy
Sentry (Functional Software, Inc.)Error and slow-page reports, cleaned of personal data, report links and query strings. No screen recording and no typing.Finds and fixes bugs.The EU (Germany).Sentry DPA
Cloudflare, Inc.The records for our domain name (DNS). It does not handle our email.Runs the records for our domain name.Cloudflare's global network.Cloudflare DPA
Google WorkspaceEmails you send to hello@sitecomb.com, which arrive in our Google Workspace inbox, and the alert and help-request emails we send ourselves.Delivers and hosts our own email and inbox.Google's global network.Google Cloud DPA

We don't send visitor or customer data to an AI model provider. When you use Sitecomb inside ChatGPT or Claude, that assistant's own company handles your chat under its own privacy policy, and we never receive your chats.

If you tick the box asking for help fixing your site, your email, website and score go to our agency partner, Sahbis Limited, the company that runs Sitecomb. That is your choice, not a provider.

What happens to data that leaves Europe?

Sitecomb serves customers worldwide, so some of these providers process data outside the European Economic Area, including in the United States. Where data leaves the European Economic Area or the UK, it is protected by an adequacy decision or the standard contractual clauses approved for that purpose.

How will I hear about changes?

When we add or replace a provider, we update this list and the date at the top. Agencies on a plan get 14 days' notice by email first, as the data processing agreement says.

Ask us: hello@sitecomb.com

Preview

Preview: a sample report

We didn't check your site. This is a sample report for a made-up barber shop, so you can see what you'll get.