Sub-processor
List

This is the list referred to in section 6 of our Data Processing Agreement. It names the companies that may process personal data you store on our services, and those that handle your account data on our behalf.

We announce changes at least 30 days in advance on this page and by email to account holders, and you can object as the DPA describes.

• Data-centre and infrastructure partners — physical hosting, power, cooling and network connectivity for the servers we operate, in the location you choose. EU/EEA locations: Romania, Poland, the Netherlands, Germany and Austria, plus the EU countries listed for dedicated servers; outside the EEA: Ashburn, United States, only if you order there. The partner for each location is named to customers on request.
• Cloudflare, Inc. (United States, global network) — protects and delivers our control panel, API and browser console; console sessions pass through its network in transit. Safeguard: EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

No one outside the EEA has administrative access to servers in our EU/EEA locations.

For this data we are the controller, as described in our Privacy Policy. We list these providers so you have the full picture.

• Hetzner Online GmbH (Germany; data centres in Germany and Finland) — hosts our control panel and billing databases, and their backups.
• Google (Google Workspace) — sends and stores the email we exchange with you. Safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
• Stripe (Ireland) — card payments.
• PayPal (Luxembourg) — PayPal payments.
• CoinGate (Lithuania) — cryptocurrency payments.

• October 1, 2026 — list first published.