# Sub-processors — roamgap

> The services that process data on roamgap's behalf — their role, where they
> process it, and the agreement covering them. We update this list before adding
> a new sub-processor. Source of truth: `specs/PRIVACY.md` §3.

| Sub-processor | Role | Region | DPA |
| --- | --- | --- | --- |
| PostHog Inc. | Product analytics + session replay | EU (Frankfurt) | Standard PostHog DPA |
| Functional Software, Inc. (Sentry) | Error + performance monitoring | EU | Standard Sentry DPA |
| Grafana Labs | Metrics visualisation | EU | Standard Grafana Cloud DPA |
| Google Cloud Platform | Hosting (Cloud Run, Functions, Firestore) | europe-west1 (Belgium) | Google Cloud DPA |
| Firebase (Google) | Auth, Firestore, Hosting | europe-west1 | Google Cloud DPA |
| WiraPay | Hosted checkout + subscription billing | EU (europe-west4 NL, eu-central-1 DE) | Same operator (Citizens Draft) — first-party, not a third party |
| Paystack | Payment processing (card + M-Pesa rails) | Ireland (AWS); company HQ Nigeria | Paystack DPA, via the Merchant Services Agreement |
| Safaricom PLC (M-Pesa) | M-Pesa rail, engaged by Paystack | Kenya | Covered by Paystack's sub-processor flow-down |
| Anthropic, PBC | AI destination generation | US (EU when available) | Anthropic DPA |
| Resend | Transactional email | EU | Resend DPA |
| Nager.Date | Public holiday lookup | EU | Public API, no PII transmitted |

## About the payment chain

Paying goes roamgap → **WiraPay** → **Paystack** → your card network or **M-Pesa**.

**WiraPay is our own payment service**, operated by Citizens Draft — the same
business that operates roamgap. It is listed above because you are handed off to
it at checkout and it is a visibly different service, but it is **not a third
party**, so there is no data-processing agreement between us and it. roamgap
never sees or stores your card details.

**Paystack** is the payment processor WiraPay uses, and it is a genuine third
party under a data-processing agreement. **Safaricom** provides the M-Pesa rail;
Paystack engages it, and Paystack's agreement covers that onward step.

## Source

- This page: https://roamgap.ike.work/legal/sub-processors
- Privacy policy: https://roamgap.ike.work/legal/privacy
- Cookie inventory: https://roamgap.ike.work/legal/cookies