This page is the binding list referred to in clause 6 of the Data Processing Agreement (DPA). It names every sub-processor the Processor has engaged in the processing of personal data while providing the Services.
Current list
| Sub-processor | Role | Place of processing |
|---|---|---|
| DigitalOcean, LLC | Infrastructure — compute nodes, database, object storage | Frankfurt, Germany (EU) |
| Resend, Inc. | Transactional e-mail delivery (document status notifications, registration) | EU / USA |
| GoPay s.r.o. | Payment processing for the Service | Czech Republic (EU) |
Changes to the list
The Processor will notify the Customer by e-mail at least 30 days in advance of any intention to engage a new sub-processor or replace an existing one. Within that period the Customer may object; clause 6 of the DPA governs what follows.
This page carries the date of its last update in the header. Earlier versions are available from the Processor on request.
Transfers outside the EU
Where a sub-processor carries out processing outside the European Economic Area, it is safeguarded by one of the instruments in Chapter V GDPR — an adequacy decision or standard contractual clauses. Standard contractual clauses apply to Resend, Inc.