Sub-Processor List
Sub-processors used to process personal data on behalf of customers.
| Name | Purpose | Location | Transfer mechanism | Added on |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, edge compute, DDoS protection | USA (DPF certified) + EU edge | EU-US Data Privacy Framework + SCCs (fallback) | 2026-03-18 |
| Stripe Payments Europe Ltd. | Payment processing — subscription billing via Stripe-hosted checkout and portal (billing contact, payment card, transaction history) | Ireland (EU) | EU entity — no third-country transfer; SCCs for any onward transfer to the United States | 2026-07-22 |
| Olinda SAS (Qonto) | Invoicing and business banking — legal invoice issuance via certified e-invoicing platform (billing contact and invoice data). ACPR-licensed payment institution n°16958, RCS Paris 819 489 626 | France (EU) | EU entity — no third-country transfer | 2026-07-22 |
| Functional Software, Inc. (Sentry) | Error monitoring and performance telemetry | USA (DPF certified) | EU-US Data Privacy Framework + SCCs (fallback) | 2026-04-18 |
| Ory Corp | Identity and authentication (Kratos) — email, MFA, sessions | Germany (EEA) | EEA — no third-country transfer | 2026-04-18 |
Per DPA §5, we notify customers of any changes with at least 30 days advance notice.