Sub-processors
Last updated 18 July 2026
This page lists the third-party service providers (“sub-processors”) that QuantumForge engages to help operate OpenPay. It exists so you can see exactly where data goes and who touches it.
01Overview
To run OpenPay we rely on a small set of third-party providers for hosting, our database, email and monitoring. Each one handles only the limited data it needs to do its job. Because most of what we publish is already anonymised and aggregated, the data shared with these providers is minimal.
On where your data lives. OpenPay is built in Nigeria and we intend to host it in Nigeria as local infrastructure matures. Today, however, our application and database are hosted in the European Union (Ireland) by the providers listed below. We are telling you this plainly because a cross-border transfer must be disclosed under the Nigeria Data Protection Act, and because you deserve to know which jurisdiction holds the data. If that changes, this page changes with it.
02Hosting & infrastructure
Vercel
EU · IrelandPurpose: Application hosting, serverless functions, CDN delivery and deployment of the OpenPay website.
Data processed: Site assets, request and traffic metadata, and application data in transit. Functions run in Vercel's Dublin (dub1) region.
vercel.comVercel Blob
EUPurpose: Object storage for company logos and uploaded brand assets.
Data processed: Company logo image files. No personal data or verification documents.
vercel.com03Database
Supabase
EU · IrelandPurpose: Managed PostgreSQL database — the primary store for OpenPay.
Data processed: Salary submissions, company profiles, reviews, interview reports and account records where an account exists. Hosted in the eu-west-1 (Ireland) region.
supabase.com04Email
Resend
EU / USPurpose: Transactional email — address verification, password resets and account notices.
Data processed: Email address and the contents of the transactional message sent to it. No salary data.
resend.com05Monitoring & abuse prevention
Sentry
EU / USPurpose: Error and performance monitoring so we can find and fix faults.
Data processed: Error traces, stack traces and technical request metadata. Configured to avoid capturing salary payloads or personal identifiers.
sentry.ioUpstash
EUPurpose: Rate limiting — protects submission and authentication endpoints from abuse and spam.
Data processed: Hashed request identifiers and short-lived counters. No salary data or personal details.
upstash.comVercel Analytics
EUPurpose: Aggregate, privacy-respecting traffic measurement — page views and referrers.
Data processed: Anonymous usage data: pages viewed, approximate region, browser and device type. No cookies used to build advertising profiles, and no salary submissions.
vercel.com06Authentication
An account is optional on OpenPay — salaries and company reviews can be shared anonymously. If you do choose to create one, you may sign in with Google.
Google (Sign in with Google)
GlobalPurpose: Optional federated sign-in for users who choose to create an account.
Data processed: Your email address and basic profile information, received only if you elect to sign in with Google.
google.com07Changes to this list
We may add, remove or replace sub-processors as OpenPay evolves — including moving hosting to Nigeria. When we do, we will update this page and the “last updated” date above. We encourage you to check back periodically.
08Contact us
OpenPay is operated by QuantumForge. If you have questions about our sub-processors, email support@openpay.ng.