Subprocessors
We host our platform primarily within the EU/EEA, apply encryption at rest, and work only with carefully vetted sub-processors that meet rigorous security standards. The table below lists these providers, their processing locations, and the purpose of their services. Where data may be accessed from outside the EEA, we rely on the EU Standard Contractual Clauses and perform transfer impact assessments. We review our sub-processor list regularly and keep this page up to date.
| Sub-processor (subcontractor) | Address | Country of processing | Purpose of data processing / description of services | Legal basis for data transfer |
|---|---|---|---|---|
| T-Systems International GmbH (Open Telekom Cloud) | Hahnstraße 43d, D-60528, Frankfurt am Main | Germany (Magdeburg; Bördeland/Biere) | Cloud platform (PaaS): virtual machines & databases; data encrypted at rest; provider visibility stops at OSI Layer 4 | No third-country transfer (processing within EU/EEA) |
| Hetzner Online GmbH | Industriestr. 25, 91710 Gunzenhausen, Germany | Germany (Falkenstein; Nuremberg) | Cloud platform (PaaS): virtual machines & databases; provider visibility stops at OSI Layer 4 | No third-country transfer (processing within EU/EEA) |
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Irland | Germany (Germany West Central region) | Cloud platform (PaaS): virtual machines & databases; data encrypted at rest (Azure KMS); provider visibility stops at OSI Layer 4 | No third-country transfer (processing within EU/EEA) |
| Atlassian Corporation (Support Desk / Jira Service Management) | Atlassian Corp.Level 6, 341 George Street, Sydney, NSW , 2000 Australia | EU (Ireland, Germany), Singapore, United States (N. Virginia, N. California, Oregon) | Support desk for ticket handling: email/username/IP and ticket content | International transfers based on EU Standard Contractual Clauses (via Atlassian DPA); TIA available |
| Zoho Corporation GmbH, (Site24x7) | Trinkausstr. 7,40213 Düsseldorf, Germany | EU Netherlands (Amsterdam); Ireland (Dublin) | Monitoring of server operations: log files that may include IP addresses and usernames; no access to application data | No third-country transfer (processing within EU/EEA) |
Last review: 07 Nov 2025