Draft for legal review. This text is not in force until it has been reviewed and published.
Sub-processors
These companies help us run :app. The Data Processing Agreement gives our clients general authorisation to use them. List version 2026-11-06.
| Company | Purpose | Data it receives | Location | Applicant data |
|---|---|---|---|---|
| Hosting provider (VPS) | Servers (VPS) that run the application, the database and the encrypted evidence volume | Everything the service stores; evidence files are encrypted by the application before they are written | EU | Yes |
| Backup storage provider | Encrypted backups | Encrypted copies of the database and private files | EU | Yes |
| MailFlash | Sending email | Applicant email address and the invitation or reminder text when the client invites by email; account emails of the client's users | ES | Yes |
| Stripe Payments Europe Ltd. | Subscription billing | Billing details of the client's account users. No applicant data | IE | No |
| Pumble (CAKE.com) | Operational alerts to our team | Reference identifiers and client names. No applicant data | US | No |
| Google / Microsoft / Apple | Optional sign-in for the client's account users | Name and email of the client's user. No applicant data | US | No |
We announce any addition or replacement at least 30 days in advance by email to the account owners of our clients.