Sub-processors
Version 2026-11-09 · [Company name]
We use the following providers to run the Service. We will update this list, and notify customers as described in the DPA, before adding or replacing a sub-processor that processes customer personal data.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| [Hosting provider] | Hosting of the application and database, running monitoring checks | all Service data | [location] |
| Stripe Payments Europe, Ltd. (and Stripe, Inc.) | Payment processing and subscription management | billing contact, payment details (we do not see full card numbers) | Ireland / United States (adequacy framework or SCCs) |
| [Email delivery provider] | Delivery of system emails and alerts | recipient email address, message content | [location] |
| [Backup storage provider] | Encrypted off-site backups | encrypted database backups (we hold the key) | [location] |
| Google Ireland Limited / Google LLC | Optional sign-in with Google | name, email address, Google account identifier | Ireland / United States |
| [Providers of the other check regions] | Monitoring check locations in other regions | monitor targets and check results | [locations] |
| External heartbeat provider | Alerts us if the Service stops running | no personal data | EU |
| OpenRouter, Inc., and the model-hosting providers it routes to (only endpoints with no data retention and no training on inputs) | AI models that help with support, operations and development (where used) | limited, task-specific data with personal data masked where possible; no use for model training | United States / EU |
Status: this list will be completed with the actual providers before the Service is opened to the public.