Sub-processors
Last updated: 2026-04-20
CoachDesk uses the following sub-processors to deliver the service. Each processor is bound by a data-processing agreement (DPA) that requires GDPR-compliant safeguards, including for international transfers.
| Processor | Purpose | Data categories | Region | DPA |
|---|---|---|---|---|
| Microsoft Azure | Application hosting, managed PostgreSQL, storage and backups. | All platform data (account, coaching, client, technical). | EU (West Europe) | View DPA |
| SendGrid (Twilio) | Transactional email delivery (confirmations, reminders, magic links). | Recipient email, name and email content. | US | View DPA |
| Stripe | Payment processing for paid plans and coach-to-client payments (when enabled). | Billing contact, payment method metadata, transaction amounts. | US / EU | View DPA |
| OpenAI | Optional AI-generated session summaries and prep briefs. | Only the coach-authored notes the coach explicitly sends for summarisation. | US | View DPA |
| Google Calendar two-way sync and Google sign-in. | OAuth tokens, calendar event metadata (booking times and titles). | US / EU | View DPA | |
| Zoom | Automatic video-meeting link creation for bookings. | Meeting title, time window and participants' names/emails. | US / EU | View DPA |
How we notify you of changes
We announce new sub-processors at least 14 days before they start processing your data, via this page and an in-app notice. If you object, you may terminate your account before the change takes effect under our Privacy Policy.
Questions
For any question about our sub-processors, please contact privacy@coachdesk.app.