Draft for legal review. This page is an engineering first draft and has not yet been reviewed by a lawyer. Bracketed placeholders mark items pending business/legal sign-off.
We use the following subprocessors to provide the service. See our Privacy Policy for the lawful basis and our Terms of Service for the Data Processing Addendum.
| Subprocessor | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting (compute & database) | All service data | EU (DE/FI) | EU/GDPR |
| Amazon Web Services, Inc. (AWS) | Object storage (uploaded lists & results) | Submitted addresses + results | EU (Ireland) | EU/GDPR |
| Stripe, Inc. | Payments | Billing metadata | US/EU | SCCs |
| Resend | Transactional email | Recipient email + content | [US] | SCCs |
| Google/GitHub/Facebook/LinkedIn/X | Optional social login | Auth identifiers | US | SCCs |
| [Grafana/Loki self-host] | Logs/metrics | Technical metadata (no list PII) | [EU VM] | self-hosted |
[Confirm each entry against contracts. Remove rows for any provider not actually in use.]