Stiple Sub-Processor List
This page lists the third-party service providers ("sub-processors") that Stiple Inc. engages to process data on behalf of Mapdesk, Mapdesk Mobile and Caster, what each one handles, which product it applies to, and where the data is located. It is referenced by, and read together with, the Stiple Privacy Policy (stiple.ca/legal/privacy, Section 5).
- Document
- Sub-Processor List
- Effective date
- 2026-10-23
- Last updated
- 2026-10-27
- Published at
- stiple.ca/legal/sub-processors
- Applies to
- Mapdesk · Mapdesk Mobile · Caster
01Current Sub-Processors
The table below sets out our current sub-processors. Each receives only the data necessary to perform its function, is bound by a Data Processing Agreement with Stiple, and may not use the data for its own purposes. Substantive personal data — your survey, project, and file data — is stored in Canada. Cross-border (United States) processing is limited to authentication and profile-photo delivery (WorkOS), payment processing (Stripe), error reports (Sentry), feedback you choose to send (Linear), and hosting of our web apps by a U.S. company (Vercel), as noted below.
| Sub-processor | Purpose | Applies to | Data location |
|---|---|---|---|
| WorkOS | Identity / authentication and profile-photo content-delivery network (CDN) | Mapdesk, Mapdesk Mobile, Caster | United States |
| Backblaze B2 | Object storage for survey / project data, images, and files | Mapdesk, Mapdesk Mobile | Canada (Toronto) |
| Amazon Web Services (AWS) | Cloud infrastructure and compute (backend) | Mapdesk, Mapdesk Mobile backend | Canada (ca-central-1, Montreal) |
| Vercel (Vercel Inc.) | Hosting of the Mapdesk and Caster web apps, stiple.ca, and the service behind them | Mapdesk, Mapdesk Mobile, Caster | Canada (Montreal) — U.S. company1 |
| Stripe | Payment processing for paid plans and organization seats | Paid plans, billed on the web2 | United States |
| Sentry (Functional Software, Inc.) | Error reports from the web apps and the service behind them, with a masked session replay only when an error happens | Mapdesk, Caster (web only)3 | United States |
| Linear (Linear Orbit, Inc.) | Receiving the feedback you send with "Send feedback" in the account menu | Mapdesk, Caster (web only) | United States |
1.Our functions run in Vercel's Montreal region. Because Vercel is a U.S. company, we treat it as a cross-border transfer.
2.Paid plans are bought and managed on the web only. Mapdesk Mobile never sells anything and has no in-app purchases, so Stripe does not apply to Mapdesk Mobile. Custom licences arranged directly with Stiple are invoiced outside the self-serve checkout.
3.Sentry is not used in Mapdesk Mobile. What an error report contains, and what is removed from it, is described in the Stiple Privacy Policy (Section 2.4).
Google Play Services Location is a bundled Android system component used by Mapdesk Mobile on Android devices. It runs on-device to provide location to the app and is not a data-transmitting sub-processor of Stiple; Stiple does not send your survey, project, or personal data to it.
02How We Manage Changes
Effective date. This list is effective as of October 23, 2026. It supersedes the list dated May 29, 2026, and any sub-processor information previously enumerated inside the Stiple Privacy Policy.
Material changes. When we add, remove, or materially change a sub-processor, we will update this page and post notice of the change here. Where applicable law requires it, we will also provide notice through other channels (for example, by email or a notice on the platform). Continued use of the Services after a change takes effect reflects your awareness of the then-current sub-processor list.
Why this list is maintained separately. Keeping the sub-processor list as a separate, dated document lets us keep it accurate as vendors change, without re-issuing the entire Privacy Policy each time. Changes to this list are governed by this page rather than by the Privacy Policy's material-change notification cycle.
03Data Residency Summary
- Substantive personal data stays in Canada — survey/project data, images, and files are stored on Backblaze B2 in Toronto; backend compute runs on AWS ca-central-1 (Montreal), and our web apps run in Vercel's Montreal region.
- The only cross-border (U.S.) processing of personal information is authentication and profile-photo delivery via WorkOS, payment processing via Stripe, error reports via Sentry, feedback you send via Linear, and hosting by Vercel, a U.S. company. Each is governed by a Data Processing Agreement with appropriate contractual safeguards. WorkOS, Stripe, Sentry and Linear do not receive the content of your survey, project, or file data.
- Foreign government access. Where Stiple receives a foreign government request to access your data, we will notify you promptly unless we are legally prohibited from doing so.