SUB-PROCESSORS
Every vendor that touches your data.
EU-only by mandate, public by principle, dated by discipline.
Last updated
| Vendor | Role | Country | DPA |
|---|---|---|---|
| Hetzner Online GmbH | Primary application + database hosting | Germany 🇩🇪 | DPA → |
| Bunny.net (BunnyWay d.o.o.) | Static asset CDN + media streaming | Slovenia 🇸🇮 | DPA → |
| Mollie B.V. | Payment processing (SEPA, iDEAL, Bancontact, card) | Netherlands 🇳🇱 | DPA → |
| Plausible Insights OÜ | No-cookie, EU-hosted website analytics | Germany 🇩🇪 | DPA → |
| MailerSend (MailerLite EU) | Transactional email delivery | Lithuania 🇱🇹 | DPA → |
| Tutanota / Tuta GmbH | Internal team communication | Germany 🇩🇪 | DPA → |
OUR SUB-PROCESSOR COMMITMENTS
What we promise.
- EU-only. No US-incorporated sub-processor will ever appear on this list.
- Public. Every sub-processor is named here, not buried in a privacy policy footnote.
- 30-day notice. When we add or change a sub-processor, paid customers get 30 days’ notice via email and on this page.
- Right to object. If a sub-processor change is unacceptable, paid customers may terminate without penalty for the remaining contract term.
- DPA chain. Every sub-processor has signed our standard DPA-flow. Their DPAs are linked above.
— BEGIN —
Start your workspace in 60 seconds.
Free for teams up to 10. No credit card. No call required.
Create your workspace →