Субподрядчики по обработке данных

A subprocessor is a company we use that may see your content or your customers' personal data. This is the complete list. We give thirty days' notice before adding one, and you may object.

The list

Contabo — hosting. Germany. Runs the application servers, the database and the Redis cache. Sees everything, because it is where the software runs.

Scaleway — object storage and transactional email. France, and the Netherlands for backups. Stores uploaded media and the nightly encrypted database backups, and sends the email the product has to send: sign-in verification, password resets, invitations, review requests and mention notifications.

Bunny.net (BunnyWay d.o.o.) — DNS, TLS and caching in front of the website, the delivery API and media. Slovenia. Sees requests, including the visitor's IP address, and the published content and media that pass through them. It does not see drafts.

Paddle — payments, and merchant of record. Sees your billing name, email and country, and takes the card details directly; we never receive them. It sees no content of any kind.

Anthropic — machine translation, and only if you use it. Receives the text of the document being translated. This is the one subprocessor outside the European Union and the only route by which any of your content leaves it. It can be switched off per site, and when it is off nothing on that site is ever sent.

Lettermint — marketing email, and only for people who subscribed to the newsletter. Sees the subscriber's email address. It never sees content, and it is not used for anything transactional.

Where things are

Content, media, databases and backups are in the European Union. Backups are held in a different country from the primary data on purpose, so that one provider's regional failure is not also the loss of the copy that was supposed to survive it.

Machine translation is the exception, and is described above.

What we do about it

Each of these is under a written agreement that binds them to confidentiality and to security measures appropriate to what they handle. Transfers outside the EU rely on the standard contractual clauses.

Telling you about changes

We will email account owners at least thirty days before a new subprocessor starts handling data, saying who they are and what they will see. If you object on reasonable grounds we will try to find another way; if we cannot, you may cancel and we will refund the unused part of what you have paid.