# Service providers & data processing

Version: 2026-11-02
Status: Provider information
Operator: Codaform AB, organisation number 559607-6504, Fagermon 315, 705 91 Örebro, Sweden
Contact: info@codaform.se

The services that support Codaform accounts, hosting, communications and payments.

## Our service providers

| Provider | Service | Information involved |
| --- | --- | --- |
| Vercel | Website and API hosting | Requests, application execution and hosting logs. |
| Neon | PostgreSQL database | Account, company, licensing, billing-reference and privacy-request records. |
| Resend | Transactional email | Recipient addresses and verification, password-reset, invitation and notification messages. |
| Cloudflare Turnstile | Anti-abuse checks on protected forms | Browser and network signals used to evaluate automated requests. |
| Paddle | Merchant of record for purchases | Business billing details, checkout, payment, subscription and invoice information. |

## Processing locations and safeguards

A service can involve hosting, support, logging, email delivery and backup processing in different locations. International transfers are subject to applicable data-protection requirements. Contact info@codaform.se for processing locations and contractual safeguards relevant to your service, or to submit a supplier questionnaire.

For services covered by a customer data processing agreement, the applicable order or subprocessor schedule identifies the authorised recipients and processing locations. Provider changes follow the notification and objection procedure in that agreement.

## Processing responsibilities

Codaform is responsible for the account, licensing and security processing described in our privacy policy. Providers support those activities under their respective service arrangements. Where Codaform acts as a processor for a customer, the applicable data processing agreement governs that service.

Paddle acts as merchant of record and has its own responsibilities for purchase, payment, tax and invoice information. Its privacy notice applies to those activities. A provider's role depends on the processing it performs.

## References

- [Privacy policy](https://codaform.se/privacy)
- [Data processing agreement](https://codaform.se/trust/dpa)
- [Paddle privacy notice](https://www.paddle.com/legal/privacy)