Outside Services (Subprocessors) List
Last updated November 1, 2026 · Operated by astracoretech corp.
These outside services receive personal information to run Ur Timesheet. Companies are given 30 days' notice of additions that receive their workers' data (see the DPA).
| Service | Purpose | What it receives | Location |
|---|---|---|---|
| Amazon Web Services (EC2, RDS, S3, SES) | Servers, database, file storage, sending email | Everything stored; each email's address, subject and body | Canada |
| Vercel | Hosts the website | Website visits | United States (and its worldwide network) |
| Anthropic | AI features | Text and records described in the AI Features Notice; no images | United States |
| Stripe | Company billing (and website Plus, when released) | Company name, email, billing address, tax number, monthly charge | United States |
| Expo push service | Sending push notifications | Device token, title, text (can contain names), item IDs | United States |
| Firebase Cloud Messaging (Google) and Apple Push Notification service | Delivering pushes to Android and iPhone | The same push content | United States |
| Google Sign-In | Signing in with Google | Google returns email, name and picture | United States |
| Sign in with Apple | Signing in with Apple | Apple account ID | United States |
| Photon (OpenStreetMap, run by Komoot) | Turning addresses into map points; address search | Full home address text; search text with the phone's location | Germany |
| Google Places | Address search | Search text and the phone's location | United States |
| Nominatim (OpenStreetMap Foundation) | Postcode lookup | Exact coordinates | Europe |
| OSRM (public routing server) | Road distance and drive time | A blurred home point and the job site; during live sharing, the live point, rounded to about 110 metres, about every 2 minutes | Germany |
| Google Maps (phone app) and Apple Maps | Showing maps | What the map shows | United States |
| OpenFreeMap and CARTO | Map tiles on the website and admin map | Which map area is viewed | Europe and the United States |
| MET Norway | Weather for job sites | Job site location rounded to about 1 km | Norway |
| PostHog | Product analytics | A fixed list of events; no IP address | United States |
| Google Analytics | Public website visits, after Accept | Page views on public pages | United States |
| Calendar apps you choose (Google, Apple, Outlook) | Showing shifts in your calendar | Shifts; a manager's feed includes crew first names and last initials | Per provider |
Expo EAS builds the phone app and receives no user data. Speech-to-text uses the phone's own system; Face ID stays on the phone.
Crash and error reports are kept by us, on our own servers. If you allowed it in your phone's settings, Apple (App Store Connect) or Google (Play Console) may also send us reports of crashes of the phone app.