Trust center
Sub-processors
Every organization that processes platform data on our behalf, with its role, region and the data it touches. Material changes are notified thirty days in advance and controller participants may object on data protection grounds.
Version v1, effective 2026-08-23.
| Organization | Role | Region | Data | Since |
|---|---|---|---|---|
| Hetzner Online GmbH | Production hosting | Finland / Germany (EU) | All platform data at rest and in processing | 2026-08-17 |
| Cloudflare, Inc. | Edge, DNS, access control for the staging origin | Global edge; control plane US/EU | Request metadata in transit; access-control identities for staff | 2026-08-17 |
| DigitalOcean, LLC | Backup infrastructure | Netherlands (EU) | Encrypted backups | per ALF-01 §16.1, not yet provisioned for this portal |
Change log
- v1 · 2026-08-23
First published list. Hosting and edge as deployed for staging; e-mail and support tooling as configured in the repository. Identity verification, SMS/USSD gateway and CRB connections named in ALF-01 §16.1 are not yet contracted and are therefore not listed: they will be added with thirty days’ notice.
To be notified of changes, ask for the sub-processor notice in diligence: talk to a person. Back to the trust center.