AlpineTable
Sub-processors
Draft — not yet effective
These providers can process personal data that customers manage in AlpineTable. Providers marked as optional are used only when the restaurant turns on the related feature.
Draft register. Some provider legal entities, access locations and transfer safeguards are still being verified.
| Provider | Purpose | Personal data | Location and safeguards |
|---|---|---|---|
| Railway Corporation | Application hosting and PostgreSQL database | All data stored in AlpineTable | EU app and database region configured; Railway DPA includes transfer safeguards. Production backup settings and support access still to verify. |
| Plus Five Five, Inc. (Resend) | Booking, account and marketing email delivery, and delivery events | Recipient names and emails, email content, delivery and bounce events | Message content and logs stored in the United States, including when an EU sending region is selected; Resend DPA includes SCCs and EU–US Data Privacy Framework participation. |
| Cloudflare, Inc. | Image storage (R2) and bot protection on signup (Turnstile) | Uploaded photos and menu images; IP address and browser signals of people signing up | R2 bucket jurisdiction and Turnstile processing locations to verify; Cloudflare DPA includes transfer safeguards. |
| Anthropic, PBC | Optional AI features: owner assistant, menu parsing, marketing email drafting and restaurant research at signup | Messages and prompts from staff, menu images, and the booking and guest details the assistant looks up to answer (such as names, party sizes and dietary notes) | API data is stored in the United States by default and may be processed in several regions; Anthropic DPA includes SCCs. |
| OpenAI Ireland Ltd. | Optional transcription of Telegram voice notes | Voice recordings from staff, which may mention guest details | The app currently calls the global API endpoint; EU processing for this transcription route is unverified. OpenAI DPA includes transfer safeguards. |
| Kapso, Inc. | Optional WhatsApp connection for the owner assistant | Staff phone numbers, message content, media and transcripts, which may include guest details | United States and Chile processing described in Kapso’s DPA and subprocessor list; EU SCCs are incorporated. |
| Meta/WhatsApp | Optional delivery of WhatsApp messages, through Kapso | Staff phone numbers and message content | Meta/WhatsApp processing may occur in the United States and other locations; contractual role and safeguards depend on the connected account. |
| Telegram | Optional Telegram owner assistant | Staff Telegram accounts and message content, which may include guest details | Telegram says EEA user data is stored in the Netherlands; bot-message processing and contractual role still to verify. |
| Telegram | Optional Telegram owner assistant | Staff Telegram accounts and message content, which may include guest details | Telegram says EEA user data is stored in the Netherlands; bot-message processing and contractual role still to verify. |
Other services receive limited technical data without access to the customer’s guest data: AlpineTable emails load fonts from Google Fonts, restaurant pages load map tiles from OpenStreetMap, and the signup form looks up restaurant addresses with the French Géoplateforme (IGN).