Subprocessors
Last updated 22 October 2026
Service providers that process personal data on Baseform's behalf, under data processing terms.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database and sign-in | All stored data, encrypted | EU (Frankfurt) |
| Vercel | Hosting the web app and server | Data in transit while serving you; short-lived logs without health values | Server functions in the EU; company in the USA |
| Resend | Sign-in emails | Your email address and the one-time code | USA |
| Anthropic | AI coach, morning brief, weekly review, lab-report import — only after you turn the AI coach on | The health data a request needs and your messages | USA |
Other services Baseform talks to
- OpenStreetMap: Map tiles for workout routes are loaded by your browser; OpenStreetMap sees your IP address and which map area is shown, nothing else.
- SMHI and Open-Meteo: Weather, daylight, pollen and air quality. Baseform's server sends only the coordinates of the city you chose.
WHOOP, Apple Health, Withings and Strava are sources you connect yourself; they hold your data under their own terms and aren't Baseform's processors.