Trust
Sub-processors and DPA.
Transparency about who processes data on our behalf, and how to put a Data Processing Agreement in place.
Sub-processors
These are the providers that help us run the service. We use US providers only where there is no equal alternative, always under Standard Contractual Clauses (SCCs).
| Name | Purpose | Location |
|---|---|---|
| Exoscale | Application hosting, database & file storage | Switzerland / EU |
| Cloudflare | CDN & transit (no storage), under SCCs | Global edge |
| Mailjet | Transactional & update email | EU |
| Mistral | AI help assistant | EU |
| PostHog | Product analytics | EU |
| Mollie | Payments | EU |
| Linear | Support & CRM operations | US, under SCCs |
Cloudflare acts as a transit sub-processor and stores no client data. Where a provider is US-based, transfers fall under SCCs. Your application data and files are stored on Exoscale in Switzerland and the EU.
Cookies
Our website uses essential cookies to run the service, analytics cookies (PostHog, EU region), and marketing or retargeting cookies that may involve providers such as Meta and Google. Analytics and marketing cookies load only after you accept them in the cookie banner. You can withdraw consent at any time by clearing the cookies and site data for this site in your browser.
Data Processing Agreement
You can read our full Data Processing Agreement (DPA) online and download or print it. Need a copy counter-signed by both parties for your records or your client's procurement? Request one through the contact page.