Legal

Data Subprocessors

Tulipp uses the following third-party providers to operate its platform. All providers are selected to ensure a level of data protection equivalent to our Privacy Policy.

Last updated: July 5, 2026

EU-based providers

Provider	Purpose	Category	Location
Railway	Application hosting & infrastructure	Hosting	EU (Frankfurt)
Vercel	Frontend hosting & CDN	Hosting	EU edge nodes

US-based providers (SCCs / adequacy)

Provider	Purpose	Category	Transfer basis
Stripe	Payment processing	Payments	SCCs
PostHog	Product analytics & session recording	Analytics	EU cloud (Frankfurt)
Sentry	Error monitoring & performance	Errors	SCCs
OpenAI	AI-powered CV analysis & matching	AI	SCCs
SuperTokens	Authentication & session management	Auth	Self-hosted / SCCs
Google	OAuth social login	Auth	SCCs

Self-hosted / no data transfer

Component	Purpose	Notes
PostgreSQL (via Railway)	Primary database	Hosted in EU Frankfurt region
Redis (via Railway)	Caching & rate limiting	Hosted in EU Frankfurt region

International transfers: Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the provider operates from an EU region with no cross-border transfer of personal data.

Questions? Email us at privacy@tulipp.io · Privacy Policy