Sub-processors Register

Wize Athletics relies on a small number of outside companies to run the platform. A sub-processor is one of those companies: a service provider that stores or handles your personal information on our behalf, under a contract that allows them to use it only to provide their service to us. This page lists every one of them, what they hold, and where they hold it.

Last reviewed: 2026-06-03 Status: DRAFT — pending ROBIC sign-off

We will update this page before any new sub-processor begins processing your personal information.

For how we collect and use personal information generally, see our Privacy Policy.

Supabase

Managed PostgreSQL database, sign-in, and file storage — the system of record for the platform.

• What they hold: your account and profile, your organization and team memberships, and the health, wellness, and body-composition entries you or your coaches record. Health, wellness, body-composition and date-of-birth fields are encrypted before they are stored.
• Where: Montréal, Québec (AWS ca-central-1).
• Leaves Québec: No.
• Their own sub-processors: https://supabase.com/legal/subprocessors

Google Cloud Platform

Runs the application itself — the servers that answer your requests, the queue that carries out background work such as sending an email, the scheduler behind nightly calculations, and the pipeline that ships new versions of the platform.

• What they hold: no lasting copy of your information. Your data passes through the servers' memory only while a request is being answered, and background jobs normally carry just a reference number that points back to the database. Operational logs may record internal account identifiers and error details.
• Where: Montréal, Québec.
• Leaves Québec: No — the services that handle your data all run in Montréal. Google's own support staff may work with those systems from outside Québec when they help us troubleshoot, under their standard data-protection terms.
• Their own sub-processors: https://cloud.google.com/terms/subprocessors

Amazon SES (Amazon Web Services)

Delivers the emails the platform sends you — invitations, password resets, and other notices about your account.

• What they hold: the recipient's email address and the contents of the message, which normally include a name, an organization or team name, and a link. Messages never contain health, wellness, or body-composition data. Amazon keeps no address book or mailing list for us, and does not retain the message itself once it has been delivered.
• Where: Montréal, Québec (AWS ca-central-1).
• Leaves Québec: No — messages, recipient addresses, and delivery records stay in Montréal. Amazon's own support staff may work with those systems from outside Québec when they help us troubleshoot, under their standard data-protection terms.
• Their own sub-processors: https://aws.amazon.com/compliance/sub-processors/

GitHub

Stores the platform's program code. It is a tool our developers write in, not part of the running service.

• What they hold: none of your information. GitHub holds program code only — no accounts, no health or wellness entries, and no credentials that would open the database.
• Where: United States (program code only).
• Leaves Québec: No. Because no personal information is ever sent to GitHub, nothing of yours travels outside Québec through it.
• Their own sub-processors: https://docs.github.com/en/site-policy/privacy-policies/github-subprocessors-and-cookies

Change log

We record every addition, removal, or material change to this list here.

To be notified when this page changes, or to ask a question about any provider listed above, write to privacy@wizeathletics.ca.