Sub-processor Register
Integration inventory with verification status, not an assurance of completed provider due diligence.
Draft — pending legal review · Version 2026-10-07.1 · Prepared 2026-10-07
Legal operator: NOT COMPLETED — pending verification
Company number (if incorporated): NOT COMPLETED — pending verification
Postal address: NOT COMPLETED — pending verification
Privacy contact: NOT COMPLETED — pending verification
Support and complaints: NOT COMPLETED — pending verification
New production subscriptions are blocked until the legal identity, verified contacts and required approvals are completed.
Register status
Pending verification — do not treat as final. Each entry below identifies a technical service observed in the project. Verify the provider's contracting entity, role, actual hosting/onward-processing locations, DPA, transfer mechanism and review date before production use. Some recipients may be independent controllers rather than sub-processors for particular purposes.
Lovable / Lovable Cloud
Service: hosting, database, authentication and private storage. Data categories: accounts, fleet/driver records, documents/photos and logs. Purpose: running and securing BeeTrac. Hosting/location: pending verification. DPA/transfer mechanism and role assessment: pending verification. Review date: not yet recorded.
Stripe
Service: subscription checkout and payment administration. Data: billing contacts, subscription/payment identifiers and provider-entered card details. Purpose: collecting subscriptions and managing payments. Hosting/location, independent-controller/processor roles, DPA and transfer mechanism: pending verification. Review date: not yet recorded. Service-charge online payments remain unconnected/demo.
AI model providers via Lovable AI Gateway
Service: Fleet Assistant and document extraction. Data: selected fleet context and relevant document text/images provided with the request. Purpose: answering questions and extracting fields. Exact model provider, hosting, onward use, retention, DPA and transfer mechanism: pending verification for the configured model. Review date: not yet recorded.
DVLA Vehicle Enquiry Service
Service: authorised registration lookup when a key is configured. Data: registration and associated request metadata. Purpose: retrieving supported vehicle information. This is an external data source; its legal role, terms and location require verification, not automatic classification as a processor. Review date: not yet recorded. Without a key, results are labelled demo.
Google Fonts
Service: externally requested font styles/files. Data: visitor connection/request information. Purpose: rendering typography. Hosting/location, provider role, terms and transfers: pending verification. Review date: not yet recorded. No inference about cookies or compliance is made from the font integration alone.