Sub-processors
The companies that store or process data on Arvald's behalf, and what each one handles.
Last updated: 24 August 2026.
Arvald runs on other companies' infrastructure. These are the ones that hold or handle data on Arvald's behalf. This page exists so that the list is checkable rather than implied, and it is the one place in the product where these companies are named on purpose.
| Company | What it handles | Where |
|---|---|---|
| Google Cloud | The application servers, the database, and the sign-in system. Effectively all coach and player data lives here | Sydney, Australia |
| Vercel | Hosting for the websites: the marketing site, the coach dashboard, the sign-in pages and these docs | Global edge network |
| Vercel Blob | Photos a coach uploads to their public page | Vercel storage |
| Stripe | Card payments for bookings. The charge is created on the coach's own connected account, so Stripe holds the payment and the coach's payout details | Stripe's own infrastructure |
| Resend | Delivers the sign-in code email. This is the only email Arvald sends | Resend's own infrastructure |
| Cloudflare | DNS for the development environment, arvald.dev. The production domain no longer uses it | Global |
| Google (Analytics) | Measures visits to the marketing site and this documentation site, if you allowed it. Sees which pages were visited, never what was entered or booked | Google's own infrastructure, not Australia |
Notes worth reading
The sign-in system is not a third party. Arvald runs its identity software itself, on its own servers in Google Cloud, rather than using a hosted identity provider. So your email address, name and sign-in history sit with Arvald's own infrastructure, and the sub-processor underneath it is Google Cloud, not a separate identity company.
Stripe's relationship is with the coach, not only with Arvald. Because charges are created on the coach's own connected account, a coach has their own direct agreement with Stripe, completes Stripe's identity checks themselves, and gives Stripe their bank details directly. Arvald never sees them. See the terms of service for what that means for refunds and disputes.
No data processing agreements are claimed here. Arvald has not executed a formal data processing agreement with any of the companies above. That is stated rather than left vague, because a sub-processor list normally implies one and this one should not.
Google appears twice, for two unrelated things. Google Cloud is where Arvald's own servers and database run, in Sydney. Google Analytics is a separate product measuring page visits, and what it collects does not stay in Australia. They share a parent company and nothing else: the first holds every coach and player record, the second never sees any of it.
Google Analytics is the only entry on this list you can switch off. Every other company here is doing something Arvald cannot work without. See privacy for how, and for what is measured.
Changes
Adding a company to this list is a change to how your data is handled, so this page gets a new date at the top when the list changes.