Clockneo
Subprocessor Schedule
Last updated 2 November 2026
This schedule lists the providers Panivon Ltd uses to deliver Clockneo, the personal data they may receive and the arrangements that apply.
Effective date
Effective from: 2 November 2026
Panivon Ltd uses the providers below for the specified services. A provider may act as a subprocessor for customer-controlled information, as a processor for Panivon’s own controller information, or independently as controller for particular activities.
Only providers applicable to the customer’s enabled services are authorised to receive Customer Personal Data under the DPA.
A configured UK or European service region does not necessarily limit support, administration, logs, backups or onward processing to that region.
1. Providers used for Clockneo
| Provider | Purpose, data and role | Locations and transfer arrangements | Current use |
|---|---|---|---|
| Vercel Inc. | Application hosting, server functions, content delivery and request logs. Receives service requests and responses, including workforce information being displayed or submitted, and request metadata such as IP addresses. Subprocessor for Customer Personal Data | Clockneo’s server functions run in Vercel’s London region. Vercel’s global network and US operations may also process requests and logs. Vercel publishes a Data Processing Addendum for Pro and Enterprise plans, including UK transfer provisions | In use for all Clockneo services |
| Neon, a Databricks company | PostgreSQL database storing account, workforce, attendance, billing and audit records. Rolling recovery history is currently six hours; manual snapshots and branch copies are handled as described in DPA clause 10. Subprocessor for Customer Personal Data | Database hosted on Amazon Web Services in London (eu-west-2). Provider support and administration may take place elsewhere. Neon’s platform terms, data processing terms and the Databricks data transfer addendum include UK transfer provisions | In use for all Clockneo services |
| Clerk, Inc. | Sign-in, account identity, sessions, invitations and authentication emails for dashboard users. Subprocessor for covered account data. Clerk’s DPA treats some account information as Clerk’s own controller data | United States and other locations used by Clerk’s providers. Clerk’s DPA includes UK transfer provisions | In use for dashboard sign-in. Kiosk PIN clocking does not use Clerk |
| Google, through Firebase | Firebase Authentication and Cloud Firestore for live dashboard updates: user identifier, organisation and role, event types and internal identifiers for the organisation, location and changed record. Firebase Cloud Messaging for browser notifications that users enable: device tokens and notification content. Cloud Storage for Firebase for compliance documents that customers upload: the files, stored privately under an organisation-specific path and available to users only through Clockneo’s access checks. Subprocessor for Customer Personal Data that these functions actually receive | Cloud Firestore storage is in London (europe-west2). Compliance documents are stored in Cloud Storage, which may be located outside the United Kingdom, including in the United States. Authentication, messaging and support operations may be international, including the United States. Firestore, Cloud Storage and Firebase Authentication use the Google Cloud agreement and Cloud Data Processing Addendum; Cloud Messaging uses the Google APIs terms and Firebase Data Processing and Security Terms. The applicable processing terms include UK transfer provisions | In use for live updates, for notifications a user enables and for compliance documents a customer uploads |
| LocationIQ, operated by Unwired Labs | International address search when an authorised user searches for a location’s address in shop settings. Clockneo’s server sends the search text, with the location’s country, to LocationIQ’s United States endpoint; the user’s browser does not contact LocationIQ. Searches should contain business-premises addresses only. Subprocessor for any Customer Personal Data that a search contains | United States endpoint. Unwired Labs’ Data Processing Addendum applies to Panivon’s account through LocationIQ’s Terms of Service and covers address searches sent to that endpoint. Transfers from the UK use the EU Standard Contractual Clauses (Module 2) with the UK Addendum to those clauses | In use when an authorised user searches for an address |
| Functional Software, Inc., trading as Sentry | Application error diagnostics. Clockneo filters events and does not send default personal information, but an event can include limited technical identifiers. Session replay and performance tracing are off. Subprocessor for any Customer Personal Data in an event | Service data stored in the European Union, as configured for the Sentry organisation. Support and onward processing may occur elsewhere, including the United States. Panivon’s accepted Sentry DPA includes UK transfer provisions | In use for error monitoring |
| Stripe, the entity named in Panivon’s Stripe services agreement | Hosted Checkout and Billing Portal, subscriptions, invoices and payment administration. Business billing contacts and transaction information; no workforce attendance records. Processor for some activities and independent controller for its own payment, fraud-prevention and regulatory activities | International processing, including the United States. Stripe’s DPA and Data Transfers Addendum form part of its services agreement | Used when a customer takes a paid subscription. Not used during the no-card trial |
Provider terms: Vercel DPA (https://vercel.com/legal/dpa), Neon platform terms (https://neon.com/platform-terms), Databricks DPA (https://www.databricks.com/legal/dpa) and data transfer addendum (https://www.databricks.com/legal/data-transfer-addendum), Clerk DPA (https://clerk.com/legal/dpa), Google Cloud Data Processing Addendum (https://cloud.google.com/terms/data-processing-addendum), Firebase processing terms (https://firebase.google.com/terms/data-processing-terms), Sentry legal terms (https://sentry.io/legal/), Stripe DPA (https://stripe.com/gb/legal/dpa) and LocationIQ DPA (https://eu1.locationiq.com/dpa).
2. Other providers and services
The providers below are not authorised to receive Customer Personal Data under the DPA.
| Provider | Purpose and data | Treatment |
|---|---|---|
| Zoho, through Zoho Mail Lite (Panivon business email) | Panivon’s business mailbox, enquiries@panivon.com. Email sent to support@clockneo.com and privacy@clockneo.com is delivered to that mailbox through aliases. Do not send workforce records, payroll files or other employee information to these addresses | Processor for Panivon’s own business, support and privacy correspondence. This route is not authorised for customer workforce records. Panivon’s Mail Lite account is with Zoho Corporation Limited, and the mailbox is held in Zoho’s United Kingdom data centre. Panivon and Zoho executed a Data Processing Addendum on 27 October 2026. Zoho has confirmed the United Kingdom data centre and explained that its Indian group entities may have regulated, logged and audited remote access for support and troubleshooting, covered by an SCC-based intra-group agreement and the UK Addendum for UK personal data. Ordinary email to these addresses is now delivered to Zoho. Correspondence received earlier, when this email was forwarded to a Google Gmail mailbox, may still be held in that mailbox |
| Plus Five Five, Inc., trading as Resend | Transactional email from Clockneo: service notices about trial expiry, billing, payment problems, plan changes, cancellation and access, sent to the organisation’s Primary Owner, and payment-recovery alerts and verification messages sent to Panivon’s operator. Receives the recipient’s email address, organisation name, message content, internal organisation, subscription and invoice identifiers, payment amount and status, and delivery events; no workforce records | Processor for Panivon’s own account-administration and operator correspondence under Resend’s incorporated DPA. Not authorised for Customer Personal Data. Any later use for Customer Personal Data requires the applicable DPA clause 5 notice. Resend’s incorporated DPA includes UK transfer provisions, and Resend may process this email outside the United Kingdom |
| Postcodes.io, a public service maintained by Ideal Postcodes | UK postcode lookup when a location’s postcode is saved or looked up in shop settings. Clockneo’s server sends the postcode only; the user’s browser does not contact Postcodes.io | Use for business-premises postcodes only, under the service’s published data licences. Clockneo does not send Northern Ireland (BT) postcodes, because commercial use of that data needs a separate licence |
| OpenStreetMap Foundation | Map preview on the geofence settings page. It loads in the user’s browser only after the user selects “Load map preview” | Independent controller under its own privacy policy. When the preview is loaded, it receives browser request information, including IP address, and the map area. Clockneo sends it no referrer and no workforce information |
| SIA Monkey See Monkey Do, operating Healthchecks.io | Scheduled-job heartbeat monitoring | Receives fixed job identifiers and random run identifiers only, with no customer or workforce data |
More information: Postcodes.io licences (https://postcodes.io/docs/licences/), OpenStreetMap Foundation privacy policy (https://osmfoundation.org/wiki/Privacy_Policy), Healthchecks.io privacy policy (https://healthchecks.io/privacy/).
3. Transfer details
Where a provider in section 1 transfers personal data from the UK, the arrangement identified for it applies. That is either UK adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework where the recipient is certified for the relevant data, or the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
Contact privacy@clockneo.com for details of the safeguard that applies to a provider, or for a copy of it.
4. Changes and questions
We give at least 14 days’ notice by email of new and replacement subprocessors, with an opportunity to object, under DPA clause 5. Shorter notice applies only to urgent replacements described there.
Contact privacy@clockneo.com for questions, objections or copies of relevant safeguards.