Clockneo
Subprocessor Schedule
Last updated 12 October 2026
This schedule lists the providers Panivon Ltd uses to deliver Clockneo, the personal data they may receive and the arrangements that apply.
Effective date
Effective from: 12 October 2026
Panivon Ltd uses the providers below for the specified services. A provider may act as a subprocessor for customer-controlled information, as a processor for Panivon’s own controller information, or independently as controller for particular activities.
Only providers applicable to the customer’s enabled services are authorised to receive Customer Personal Data under the DPA.
A configured UK or European service region does not necessarily limit support, administration, logs, backups or onward processing to that region.
1. Providers used for Clockneo
| Provider | Purpose, data and role | Locations and transfer arrangements | Current use |
|---|---|---|---|
| Vercel Inc. | Application hosting, server functions, content delivery and request logs. Receives service requests and responses, including workforce information being displayed or submitted, and request metadata such as IP addresses. Subprocessor for Customer Personal Data | Clockneo’s server functions run in Vercel’s London region. Vercel’s global network and US operations may also process requests and logs. Vercel publishes a Data Processing Addendum for Pro and Enterprise plans, including UK transfer provisions | In use for all Clockneo services |
| Neon, a Databricks company | PostgreSQL database storing account, workforce, attendance, billing and audit records. Rolling recovery history is currently six hours; manual snapshots and branch copies are handled as described in DPA clause 10. Subprocessor for Customer Personal Data | Database hosted on Amazon Web Services in London (eu-west-2). Provider support and administration may take place elsewhere. Neon’s platform terms, data processing terms and the Databricks data transfer addendum include UK transfer provisions | In use for all Clockneo services |
| Clerk, Inc. | Sign-in, account identity, sessions, invitations and authentication emails for dashboard users. Subprocessor for covered account data. Clerk’s DPA treats some account information as Clerk’s own controller data | United States and other locations used by Clerk’s providers. Clerk’s DPA includes UK transfer provisions | In use for dashboard sign-in. Kiosk PIN clocking does not use Clerk |
| Google, through Firebase | Firebase Authentication and Cloud Firestore for live dashboard updates: user identifier, organisation and role, event types and internal identifiers for the organisation, location and changed record. Firebase Cloud Messaging for browser notifications that users enable: device tokens and notification content. Cloud Storage for Firebase holds compliance-document files only where that upload function is included. The initial public service does not include those uploads. Subprocessor for Customer Personal Data that these functions actually receive | Cloud Firestore storage is in London (europe-west2). Authentication, messaging and support operations may be international, including the United States. Firestore and Firebase Authentication use the Google Cloud agreement and Cloud Data Processing Addendum; Cloud Messaging uses the Google APIs terms and Firebase Data Processing and Security Terms. The applicable processing terms include UK transfer provisions | In use in Production for live updates and for notifications a user enables |
| Functional Software, Inc., trading as Sentry | Application error diagnostics. Clockneo filters events and does not send default personal information, but an event can include limited technical identifiers. Session replay and performance tracing are off. Subprocessor for any Customer Personal Data in an event | Service data stored in the European Union, as configured for the Sentry organisation. Support and onward processing may occur elsewhere, including the United States. Panivon’s accepted Sentry DPA includes UK transfer provisions | In use for error monitoring |
| Stripe, the entity named in Panivon’s Stripe services agreement | Hosted Checkout and Billing Portal, subscriptions, invoices and payment administration. Business billing contacts and transaction information; no workforce attendance records. Processor for some activities and independent controller for its own payment, fraud-prevention and regulatory activities | International processing, including the United States. Stripe’s DPA and Data Transfers Addendum form part of its services agreement | Used when a customer takes a paid subscription. Not used during the no-card trial |
Provider terms: Vercel DPA (https://vercel.com/legal/dpa), Neon platform terms (https://neon.com/platform-terms), Databricks DPA (https://www.databricks.com/legal/dpa) and data transfer addendum (https://www.databricks.com/legal/data-transfer-addendum), Clerk DPA (https://clerk.com/legal/dpa), Google Cloud Data Processing Addendum (https://cloud.google.com/terms/data-processing-addendum), Firebase processing terms (https://firebase.google.com/terms/data-processing-terms), Sentry legal terms (https://sentry.io/legal/), and Stripe DPA (https://stripe.com/gb/legal/dpa).
2. Other providers and services
The providers below are not authorised to receive Customer Personal Data under the DPA.
| Provider | Purpose and data | Treatment |
|---|---|---|
| ImprovMX and Google (support and privacy mailbox) | Forwarding and storage for email sent to support@clockneo.com and privacy@clockneo.com. Do not send workforce records, payroll files or other employee information to these addresses | ImprovMX Free forwards ordinary business and privacy correspondence to Panivon’s consumer Gmail mailbox. Panivon is controller of that correspondence; ImprovMX acts as its forwarding processor and Google is not treated as its processor for consumer Gmail. This route is not authorised for customer workforce records. Panivon has executed ImprovMX’s Data Processing Agreement for this Free account, including its UK Addendum. |
| Plus Five Five, Inc., trading as Resend | Delivery of payment-recovery alerts and verification messages to Panivon’s operator. Receives the operator email address, internal organisation, incident, subscription and invoice identifiers, payment amount and recovery status; no workforce records | Processor for Panivon’s own payment-administration and operator correspondence under Resend’s incorporated DPA. Customer commercial email remains off. Any later use for Customer Personal Data requires the applicable DPA clause 5 notice |
| LocationIQ, operated by Unwired Labs | International address search in shop settings, sent from Clockneo’s server to a US endpoint when that function is included | Not used for the initial public service. Where a separate arrangement includes business-premises address search, do not search for a home or other personal address; enter the location manually instead |
| Postcodes.io | UK postcode lookup in shop settings, sent from Clockneo’s server when that function is included | Not used for the initial public service. Where a separate arrangement includes it, use it for business-premises postcodes only |
| OpenStreetMap Foundation | Map preview on the geofence settings page, loaded by the user’s browser only where that function is included | Not loaded for the initial public service. Where a separate arrangement includes it, the provider receives browser request information, including IP address, and the map area, and acts under its own privacy policy. Clockneo sends it no workforce information |
| SIA Monkey See Monkey Do, operating Healthchecks.io | Scheduled-job heartbeat monitoring | Receives fixed job identifiers and random run identifiers only, with no customer or workforce data |
More information: LocationIQ DPA (https://eu1.locationiq.com/dpa), OpenStreetMap Foundation privacy policy (https://osmfoundation.org/wiki/Privacy_Policy), Healthchecks.io privacy policy (https://healthchecks.io/privacy/).
3. Transfer details
Where a provider in section 1 transfers personal data from the UK, the arrangement identified for it applies. That is either UK adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework where the recipient is certified for the relevant data, or the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
Contact privacy@clockneo.com for details of the safeguard that applies to a provider, or for a copy of it.
4. Changes and questions
We give at least 14 days’ notice by email of new and replacement subprocessors, with an opportunity to object, under DPA clause 5. Shorter notice applies only to urgent replacements described there.
Contact privacy@clockneo.com for questions, objections or copies of relevant safeguards.