Sub-processors
Last updated: 16 September 2026 · [Operating entity, registered address & governing law — to confirm before launch]
A sub-processor is a third party that processes data on our behalf so the service can run. This page lists what each category is for and where it runs. The named list — company by company, with purpose and location — is given to customers under a DPA on request: write to [email protected] and we send it the same day. We do not publish the identity of our network partners, for the same reason no network operator does.
| Category | What it is for | Where it runs |
|---|---|---|
| Cloud hosting and database | Runs the platform, the dashboard and the APIs; stores account, billing and usage records | EU (Frankfurt, Germany) |
| CDN, DNS and bot protection | Serves our sites, filters attacks and automated abuse | Global edge, EU entry |
| Upstream network partners | Carry the requests you send to the targets you choose — residential, mobile, ISP, datacenter and IPv6 exits | Global exit locations |
| Payment processing | Card, wallet and cryptocurrency payments, invoicing and fraud checks | EU / US |
| Transactional email and SMS | Receipts, alerts, password resets and one-time verification codes | EU / US |
| Support messaging | Relays the live chat to a person when you ask for one | Global |
| Product analytics | Aggregate usage metrics for the dashboard and the sites | EU |
| AI model providers | Only when you use an AI feature — AI extraction, the dataset builder, the assistant | US / outside the EEA |
What they see, and what they do not
Network partners see the requests you route through them: the target, the timing, the traffic. Page content we fetch for you is returned to you and not retained beyond delivering the result. Support attachments and the live-chat relay are never sent to a model. Content you send to an AI feature is processed by that model provider for that request only.
Changes and your right to object
Customers under a DPA are notified by email at least 14 days before a new sub-processor begins processing personal data, and may object on reasonable data-protection grounds; if we cannot resolve the objection, the affected service can be terminated. Every sub-processor is bound by data-protection obligations no less protective than our DPA, and we remain liable for their performance.
Getting the named list
Write to [email protected] from your account email. Security reviews, vendor questionnaires and procurement forms are answered the same way, under NDA where you need one.