PIING
Reading Security and privacySub-processors
Security and privacy
- Data and privacy overview
- What data Piing stores
- GDPR and your customers
- AI and your order data
- Sub-processors
- Uninstall and data deletion
In this guide
- Current sub-processors
- Tools the merchant connects
- Where the authoritative list lives
- Notice of changes
- International transfers
Search or browse documentation
Security and privacy 5 / 6
Sub-processors
The third parties Piing relies on to deliver its services, what each one does, and where to find the current list.
A sub-processor is a third party that Piing uses to deliver part of its service. Each one is bound by a data processing agreement with obligations no less protective than those Piing gives you. This article lists who they are and what they do. It matches the Data Processing Addendum.
Current sub-processors
- Anthropic PBC (United States) provides the AI model used for AI-inferred Piing: Intelligence fields. The prompt contains product titles, variants, types, vendors, prices and order dates. Names, email addresses, postal addresses, payment details and raw customer identifiers are not included. Anthropic does not train on API inputs or outputs, and retention is short. See AI and your order data.
- Supabase provides database and backend hosting.
- Vercel (United States) hosts the Piing website and portal.
- Fly.io hosts the Piing Shopify applications.
- Resend (United States) delivers transactional email, such as a pass claim link sent at the merchant's instruction.
- Apple and Google provide Wallet. Piing issues and signs Apple Wallet and Google Wallet passes with its own credentials by default, and with merchant-owned credentials where configured. Where Piing: Alerts browser push is enabled, the shopper's browser push service delivers it, including services operated by Apple and Google. That push is not a Wallet notification.
- Shopify is the commerce platform, the source of merchant and order data, the billing channel for Shopify app subscriptions, and the sender of the mandatory privacy webhooks.
- Dot Origin processes data transmitted through its NFC reader platform for the Piing Tap Box. The scope of that processing is to be confirmed.
Tools the merchant connects
Where the merchant connects its own tools, including a CRM, a loyalty vendor, a wishlist service, or the merchant's own OneSignal account, those providers act under the merchant's agreements. They are not Piing sub-processors. Piing: Alerts browser push does not use OneSignal.
Cookiebot, Google Analytics and Microsoft Clarity are used on piing.io. They are described in the Cookie Policy and are not sub-processors under the merchant DPA.
Where the authoritative list lives
The definitive, current list of sub-processors is maintained in the Data Processing Addendum. If a sub-processor is added or changed, the DPA is the place to check.
Notice of changes
Piing will notify you at least 14 days before engaging a new sub-processor, which gives you an opportunity to object. An up to date list is available at any time on request.
International transfers
Where personal data is transferred outside the UK, Piing uses a transfer mechanism required by UK GDPR: an adequacy regulation where one applies, or the International Data Transfer Addendum issued by the UK Information Commissioner to the European Commission's Standard Contractual Clauses. Where personal data is transferred outside the EEA, Piing uses an adequacy decision or the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914). A copy of the relevant transfer terms is available on request.
Note
If your procurement process needs a countersigned DPA or a written sub-processor list for your records, that can be arranged.
To request the current list, a countersigned agreement, or more detail on any single sub-processor, contact us.
Related guides
Was this guide helpful?
Next guide in Security and privacy
Uninstall and data deletion
What happens to your data when you uninstall Piing, including the access token, analysis records, scheduled deletion, and the shop redact webhook.
Still need a hand? Contact us