Trust center
Subprocessor register
The providers currently used to operate the private beta and the services planned but not active in the customer data path.
Current private-beta registerLast updated 19 August 2026
Active subprocessors
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Contabo GmbH | Virtual-server hosting for web, API, database and worker | Account data, site configuration, scans and consent records | EEA infrastructure | Service agreement and EEA processing |
Supporting providers
| Provider | Purpose | Customer personal data |
|---|---|---|
| Namecheap, Inc. | Domain registration, DNS and email forwarding | Business contact and message routing data where used |
| Let's Encrypt / ISRG | Public TLS certificate issuance | Domain and certificate-transparency metadata |
Planned but not active
Stripe billing, transactional email, external backup storage, object storage/CDN and external monitoring are not active production subprocessors while the service remains in its current private-beta configuration. This register will be updated before any of those providers receives customer personal data.
Changes and objections
Customers with an executed DPA receive at least 30 days' notice before a new subprocessor begins processing customer personal data, except where an urgent security or legal requirement makes advance notice impracticable. A customer may raise a reasoned data-protection objection during the notice period.