The complete list, with what each one is for and where it runs. If a party is not on this list, it does not process customer data.
| Party | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Application hosting | Falkenstein, Germany |
| Neon | Managed Postgres database | Frankfurt, Germany (eu-central-1) |
| Cloudflare | DNS, WAF and reverse proxy. Not a host. It terminates TLS and passes traffic to the origin | Global edge |
| Stripe | Payments, invoicing and subscription records | EU / US |
| Clerk | Authentication and session management | US |
| Migadu | Email for @itbudgit.com. The only sender for the domain | Switzerland |
| Strato | Domain registration only | Germany |
Two static assets are loaded from third-party CDNs by the browser rather than from our servers, which means those CDNs see the visitor's IP address:
fonts.googleapis.com | Web font |
cdn.sheetjs.com | Spreadsheet engine, used for workbook import and export |
Neither receives budget data. They are listed because "no third party sees anything" would not be true, and an IP address is personal data.
Customers with a signed DPA are notified before a new sub-processor begins processing, with enough notice to object. This list is the authoritative version.
Security & compliance: Trust · Security · GDPR · Sub-processors · DPA · Privacy · Terms · Cookies
Questions a page here does not answer: get in touch.