Subprocessors
We use the following subprocessors to deliver our services. The table shows the service each of them provides, where processing takes place and which safeguards apply if processing happens in a third country.
AWS Frankfurt
- Service
Cloud hosting of the production environment, databases, backups, certificates, DNS
Sending of transactional emails (approvals, reminders, notifications)
- Location
- Germany
- Safeguards (for third countries)
not applicable (EU hosting)
Datadog
- Service
Application and infrastructure monitoring, error analysis
- Location
- Germany (EU1 site); contracting entity: Datadog, Inc., USA
- Safeguards (for third countries)
access from the USA possible – standard contractual clauses (Art. 46(2)(c) GDPR)
Hetzner
- Service
Off-site backup storage
- Location
- Germany
- Safeguards (for third countries)
not applicable (EU hosting)
Mistral
- Service
AI-based document recognition of receipts
- Location
- France
- Safeguards (for third countries)
not applicable (EU hosting)
FinAPI
- Service
Open banking. PSD2 connection to bank interfaces.
- Location
- Germany
- Safeguards (for third countries)
not applicable (EU hosting)
NETCAT – IT Systems
- Service
VIES API for VAT ID lookups
- Location
- Poland
- Safeguards (for third countries)
not applicable (EU hosting)
Paxfiles
- Service
Checking whether partner companies are subject to international sanctions
- Location
- Austria
- Safeguards (for third countries)
not applicable (EU hosting)
Stripe
- Service
Processing of subscription payments (payments, invoices, customer portal)
- Location
- USA and other third countries (contracting entity: Stripe Payments Europe Ltd., Ireland)
- Safeguards (for third countries)
transfer to Stripe, LLC (USA) – EU-US Data Privacy Framework or standard contractual clauses under the Data Transfers Addendum