Data processing agreement
In short: When an employer uses a BorderDay company account, BorderDay processes employee day logs as a processor under GDPR Art. 28 and the Swiss FADP. This page is the public DPA for that processing. Sub-processors include Supabase (eu-central-1), Resend, GitHub Pages and optional Google sign-in; Stripe/Link are independent controllers for payment.