Sub-processors

R&R Vault Tech AB ("Leap") engages the sub-processors below to process personal data on behalf of our customers in connection with the Leap platform. Each is bound by a data processing agreement imposing obligations consistent with Article 28 GDPR.

Last updated: July 4, 2026

Current sub-processors

  • Amazon Web Services, Inc. (AWS) — Cloud hosting and storage. EU (eu-west-1, Ireland). DPA incorporated into AWS Service Terms; EU hosting.
  • ClickHouse, Inc. (ClickHouse Cloud) — Player analytics data storage. EU region (Frankfurt, Germany). DPA incorporated into ClickHouse Cloud Terms of Service; SCCs incorporated; EU-U.S. Data Privacy Framework certified.
  • Clerk, Inc. — Account authentication and identity management. United States. DPA incorporated into service agreement; SCCs incorporated; EU-U.S. Data Privacy Framework certified.
  • PostHog, Inc. — Product usage analytics. EU (PostHog Cloud EU — AWS eu-central-1, Germany). Signed DPA with SCCs.

Independent controllers

The following provider processes personal data as an independent data controller, not as a sub-processor of Leap.

  • Stripe, Inc. — Payment processing. Stripe determines its own processing of payment data as an independent controller. See Stripe's privacy policy. Stripe's privacy policy

Changes to this list

We may update this list as our services evolve. We'll notify customers of the addition or replacement of any sub-processor at least 30 days in advance, by email and by updating this page, in accordance with our Data Processing Agreement. Customers may object to a new sub-processor on reasonable data protection grounds within the period set out in the DPA.

Questions about our sub-processors can be directed to