Sub-Processors
Effective date: 28 October 2026
Current sub-processors
| Provider | Purpose | Primary location | Legal safeguards |
|---|---|---|---|
| OVH SAS (OVHcloud) | Hosting (VPS): application, databases, cache, analytics database, logs, backups | Germany (Frankfurt, Limburg) | DPA |
| Cloudflare, Inc. | DNS, object storage (R2) for profile pictures | EU (R2 bucket), group-wide possible | DPA, SCC, DPF where applicable |
| Auth0 (Okta, Inc.) | Authentication/sign-in | EU (tenant hosted exclusively in the EU) | DPA, SCC, DPF where applicable |
| Stripe Payments Europe, Ltd. | Payment processing, subscription and invoice management | EU (primary), group-wide possible | DPA, SCC as applicable |
| Resend, Inc. | Transactional email | EU data residency where available; possibly global | DPA, SCC as applicable |
| Google Ireland Limited | Website analytics (consent only) | EU (primary), group-wide possible | DPA, SCC as applicable |
| Formspree, Inc. | Website contact form | USA | DPA, SCC |
Changes
Material changes will be announced in advance with reasonable notice. The contractual partner may object for good cause; if no agreement is reached, a special termination right applies.