WolkSubprocessors
Last updated: July 26, 2026
When your agency uses Wolk CRM, you are the data controller for the people in your CRM and Wolk is your processor. To run the service, Wolk relies on the providers below. This page is the list of authorised subprocessors referred to in the Data Processing Agreement.
Current subprocessors
| Provider | What it does | Data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase | Database, authentication, file storage and server-side functions. The whole CRM lives here. | All account and CRM data, including contacts, consent records and scanned consent forms. | United States (AWS, N. California) | EU Standard Contractual Clauses in Supabase’s DPA |
| Vercel | Hosting for wolk.website and for the CRM web app. | Request metadata (IP address, user agent). No CRM records are stored here. | United States, global edge network | EU Standard Contractual Clauses |
| Anthropic | Generates listing copy from the walkthrough transcript. | The transcript and property details you submit. No contact records are sent. Not used to train models. | United States | EU Standard Contractual Clauses |
| Apple | App distribution, push notifications, in-app purchases. | Device push token, purchase records. | United States, Ireland | EU Standard Contractual Clauses |
| RevenueCat | Subscription management for iOS purchases. | Subscription status, anonymised customer identifier, email address. | United States | EU Standard Contractual Clauses |
| Stripe | Card payments for web subscriptions. | Billing email, payment metadata. Card details go straight to Stripe and never reach Wolk. | United States, Ireland | EU Standard Contractual Clauses |
| Google Analytics | Aggregate traffic statistics for the marketing site only. Loaded only after you accept cookies. | Site usage events. Never loaded inside the CRM or the iOS app. | United States | EU Standard Contractual Clauses |
Changes to this list
We give at least 30 days’ notice before adding or replacing a subprocessor. To be notified, email privacy@wolk.website and ask to be added to the subprocessor notice list. If you object to a new subprocessor on reasonable data protection grounds, you may cancel your subscription before the change takes effect and we will refund the unused portion of the current term.
What is not on this list
Speech recognition runs on your device: the audio of a walkthrough is transcribed by iOS locally and the recording is never uploaded. Only the resulting text is sent for listing generation. We do not use advertising networks, data brokers or analytics inside the app or the CRM.