Sub-processors
Last updated: 13 May 2026. We will notify registered users at least 30 days before adding a new sub-processor that materially affects how your personal data is processed.
| Sub-processor | Purpose | Region | Transfer mechanism | Privacy |
|---|---|---|---|---|
| MongoDB Atlas | Managed database hosting | USA (EU data residency) | EU SCCs + EU-region residency | Link |
| Fly.io | Application hosting (staging) | USA (EU compute: Frankfurt) | EU SCCs | Link |
| Hetzner Online GmbH | Production VM hosting | Germany (Helsinki, Finland) | EU (no transfer) | Link |
| Cloudflare R2 | Encrypted backup storage | USA (EU storage) | EU SCCs + EU-US DPF | Link |
| Stripe | Card payments and subscription billing | Ireland / USA | EU SCCs + EU-US DPF | Link |
| Resend | Transactional and lifecycle email delivery | USA | EU SCCs + EU-US DPF | Link |
| Sentry | Error tracking and performance monitoring | USA (EU ingest: .de.sentry.io) | EU SCCs | Link |
| PostHog | Product analytics, feature flags (consent required) | USA (EU instance: eu.i.posthog.com) | EU SCCs | Link |
| Google (Gmail OAuth) | Optional Gmail integration for sending emails | USA | EU SCCs + EU-US DPF | Link |
Change log
13 May 2026: Initial publication. All sub-processors listed above.