KeyBoltSub-processors
Last updated: May 4, 2026
KeyBolt relies on the third-party sub-processors below to deliver the platform. Each is contractually bound by data processing terms equivalent to or stronger than those in our Privacy Policy.
We will provide at least 30 days' notice at this URL before adding a new sub-processor. To receive notifications by email, write to privacy@keybolt.tech.
| Sub-processor | Role | Country |
|---|---|---|
| Supabase | Primary database, authentication, file storage. Stores all customer records, jobs, invoices, key codes, photos, and identity-verification uploads. | United States (Northern Virginia, AWS us-east-1) |
| Stripe | Payment processing for subscription billing and shop-to-customer invoices. Stripe Connect routes payouts to the locksmith’s bank account; Stripe Terminal handles in-person card readers. | United States |
| Telnyx | Telecommunications carrier for KeyBolt + Phone — voice calls, SMS, MMS, A2P 10DLC registration, call recording, and Whisper-based transcription. Acts as the underlying carrier for the shop’s business phone number. | United States |
| Resend | Transactional email delivery — invoices, payment receipts, team invites, password resets. | United States |
| Cloudflare Turnstile | CAPTCHA on signup, contact form, password reset, and customer-portal flows. No tracking cookies. | United States (with global edge) |
| Sentry | Error tracking and (with consent in EU/UK) session replay for debugging. Replay records anonymized DOM interaction; PII is scrubbed at the SDK before transmission. | United States |
| Vercel | Application hosting, edge runtime, and analytics. Receives request metadata (IP, user-agent, geo) for serving the application. | United States |
| Google (Local Services Ads) | Optional integration on KeyBolt + Phone. When connected, KeyBolt pulls LSA leads via the Google Ads API v24 and posts replies on the locksmith’s behalf. Google’s sub-processor when handling LSA conversation content. | United States |
Data Processing Addendum
A standard Data Processing Addendum (DPA) incorporating the EU Standard Contractual Clauses and UK Addendum is available on request. Email privacy@keybolt.tech to receive a countersignable copy.