Subprocessors

Third parties that process customer data on our behalf.

A subprocessor is any service we rely on to deliver the product. We keep this list current, version it in git, and notify customers of material changes.

Last updated: 2026-04-24

Simplified EU map showing Hetzner Germany as the single deployment region; US data centres and third-country regions explicitly excluded — All compute, storage, and signing keys live in Germany (Hetzner — Falkenstein and Nürnberg). US and third-country regions are excluded by design — not a deployment toggle.

Provider	Purpose	Data processed	Region	Website
Hetzner	Infrastructure (compute, storage, database)	All customer data	Germany (Falkenstein / Nuremberg)	hetzner.com
HashiCorp Vault	Key management (Transit secrets engine)	Signing keys; no customer data	Self-hosted on Hetzner	hashicorp.com
Cal.com	Scheduler embedded on /en/contact	Prospect names, work emails, company, use-case notes	EU region (cal.eu)	cal.com
Plausible	Site analytics	No PII; anonymous event data	Germany	plausible.io

How we notify you of changes

When we add, remove, or change a subprocessor, we update this page in a pull request and bump the "Last updated" date. The git history of this page is our subprocessor changelog. Customers who have requested advance notification are emailed before the change ships.

Back to the security review