Subprocessors
These companies help run Shootable and handle personal data on our instructions. Organisations using Shootable are told of a new subprocessor at least 30 days before it starts, by email to their admins and on this page, and may object. See also the privacy page.
Cloudflare, Inc. (United States)
Runs the service: the Workers that serve the app and links, the database of accounts and organisations (D1), the stored shoots, libraries, photos, history and backups (R2), and the live schedule rooms (Durable Objects). Since 2 November 2026 the database, storage and rooms are kept in Cloudflare's EU jurisdiction, which keeps that data in the European Union. Requests are served from the Cloudflare data centre nearest the person using Shootable. A small key-value store outside the EU jurisdiction holds only technical records: link addresses, rate limits, notification registrations. Cloudflare is certified under the EU-US Data Privacy Framework.
Resend, Inc. (United States)
Sends Shootable's emails: sign-in codes and links, invitations, call sheets a planner sends, and notices to an organisation's admins. It receives the recipient's address and the email's content. Transfers are covered by the European Commission's standard contractual clauses.
Apple Inc. (United States) and Apple Distribution International (Ireland)
Delivers notifications and Live Activities to iPhones, iPads, Macs and Apple Watches (Apple Push Notification service): the device's token and the notification's text (a shot or shoot name, the next step). Signs people in with Sign in with Apple when they choose it. Shows maps and looks up addresses in the apps (Apple Maps). Keeps app preferences in the person's own iCloud. Apple is certified under the EU-US Data Privacy Framework.
Browser push services
When someone turns on notifications in a web browser, the browser's own push service (Google for Chrome, Mozilla for Firefox, Apple for Safari) carries the notification to that browser. It receives an encrypted notification and the browser's subscription address.