Notification commitment
In accordance with the data processing agreement annexed to the terms of sale, any change to this list (addition or replacement of a sub-processor) is notified to customers at least thirty (30) days before it takes effect, by email to the organization owner, allowing them to raise a reasoned objection.
OVHcloud — hosting
- Entity: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.
- Purpose: infrastructure hosting (server, database, daily backups).
- Data location: France (European Union).
- Transfers: no transfer outside the European Union.
Stripe — payments
- Entity: Stripe Payments Europe, Ltd. (Ireland).
- Purpose: payment, billing, customer portal.
- Data location: European Union; limited transfers to Stripe, Inc. (United States).
- Safeguards: standard contractual clauses and the EU-U.S. Data Privacy Framework.
Resend — transactional email
- Entity: Plus Five Five, Inc. (United States).
- Purpose: transactional emails (verification, invitations, contractual summaries).
- Data location: United States (account data and sending logs); sending may be routed from the European Union.
- Safeguards: standard contractual clauses.
Sentry — error monitoring
- Entity: Functional Software, Inc. (United States).
- Purpose: application error monitoring.
- Data location: hosted in the European Union region (option enabled).
- Safeguards: standard contractual clauses and the Data Privacy Framework.
Google — authentication (optional)
- Entity: Google Ireland Limited.
- Purpose: “Sign in with Google” authentication — only if the user chooses it.
- Data location: European Union / United States.
- Safeguards: standard contractual clauses and the Data Privacy Framework.
Notes
- Source code and application images are hosted on GitHub (Microsoft); no customer personal data passes through it.
- Audit screenshots and reports are stored exclusively on the OVHcloud infrastructure, in France.
- Contact for any question: the support address listed in the legal notice.