Settle legal
Sub-processors
A complete list of the third parties that may process personal data on our behalf when you use Settle. We keep this list short on purpose.
Last updated: September 12, 2026
1. Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Merchant authentication, application database, realtime updates | Merchant email and account details, invoice and customer records | United States / EU (project region) |
| Netlify | Application hosting, CDN, serverless function execution | Request metadata, IP addresses in transient access logs | Global edge network |
| Alchemy | Blockchain RPC access, transfer history, settlement webhooks | Wallet addresses and transaction data (already public on-chain) | United States |
| Helius | Solana RPC access, transaction data, settlement webhooks | Wallet addresses and transaction data (already public on-chain) | United States |
| Resend | Transactional email delivery (receipts, invoices, renewal notices) | Recipient email address, message content | United States |
2. Public blockchain networks
Settlement occurs on public blockchain networks — Base, Ethereum, BNB Chain, Polygon, Arbitrum, Optimism, and Solana. These are decentralised networks rather than vendors: no one operates them on our behalf, no contract governs them, and data written to them is permanent and publicly visible by design. They are listed here for transparency, not as sub-processors in the contractual sense.
3. Our commitments
Each sub-processor is engaged under terms that require it to process data only on documented instructions, to apply appropriate technical and organisational security measures, and to support our obligations to you. Where a transfer of personal data leaves the EEA or the UK, it is made under Standard Contractual Clauses or another recognised transfer mechanism.
We do not sell personal data, do not share it with advertising networks, and do not run third-party analytics or session-replay tooling.
4. Changes to this list
We will update this page before a new sub-processor begins processing personal data. Merchants who have entered into our Data Processing Addendum may request notice of changes by writing to [email protected], and may object to a new sub-processor on reasonable data-protection grounds as set out in that addendum.