Back to start page
Sub-processors
The following third-party providers may process personal data as part of platform operations (GDPR Art. 28). This list is maintained centrally and applies to all tenants of the platform. Individual tenants can additionally disable non-essential providers in their scope.
As of: 30.09.2026 CSV export
What do "EU", "DPF" and "SCC Module 3" mean?
- EU
- Registered office and processing within the European Economic Area — no third-country transfer, no additional safeguards required.
- DPF (EU-US Data Privacy Framework)
- US provider self-certified with the US Department of Commerce. Transfers to the USA therefore benefit from an adequate level of protection within the meaning of Art. 45 GDPR.
- SCC Module 3
- EU Standard Contractual Clauses under Decision 2021/914, module "processor to processor" — contractual safeguard for third-country transfers pursuant to Art. 46 GDPR.
-
Hetzner Online
EU (DE)Cloud-Hosting (Backup)
-
Microsoft 365
EU (IE)Geschäftspost & Dokumentenablage
-
Sentry
US (Third country)Fehler-Monitoring
DPF SCC Module 3 -
Stripe
EU (IE)Zahlungsabwicklung
-
T-Systems (Open Telekom Cloud)
EU (DE)Cloud-Hosting (Primary)
-
Anthropic
US (Third country)Sprach-KI
DPF SCC Module 3 -
Azure OpenAI Service
EU (DE)Sprach-KI (EU-Region)
-
Brave Search
US (Third country)Web-Suche für KI-Assistent
SCC Module 3 -
Mistral AI
EU (FR)Sprach-KI
-
OpenStreetMap
GB (Third country)Kartendarstellung
SCC Module 3