Last updated: April 5, 2026
EuroValidate engages the following Sub-processors to help deliver the Service. This list is maintained under Section 7 and Annex III of our Data Processing Agreement. We notify customers at least 30 days before adding or replacing any Sub-processor.
| Name | Role | Location | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Production hosting: compute, storage, managed networking | Germany (EU) | EEA-only. Hetzner DPA signed. |
| Cloudflare, Inc. | DNS, CDN edge caching, DDoS protection, Turnstile bot detection | Global edge network | Cloudflare DPA + EU SCCs (Module 3). |
| Stripe Payments Europe, Ltd. | Billing, subscription management, invoicing for EU customers | Ireland (EU) + USA | Stripe DPA + EU SCCs. EU-US DPF certified. |
| Resend Inc. | Transactional email delivery (verification, billing, webhooks alerts) | USA | Resend DPA + EU SCCs. |
| GitHub, Inc. | Source code hosting, CI/CD. Does not process Customer Data. | USA | GitHub DPA + EU SCCs. |
Error tracking (GlitchTip) is self-hosted on Hetzner infrastructure in the EU. Uptime checks are provided by Uptime Robot from a globally distributed probe network but do not receive Customer Data.
The Service queries the following public government APIs on behalf of Customers. These are data sources, not Sub-processors in the GDPR sense — we send them only the identifier to be validated, not Customer account data:
To be notified by email of Sub-processor changes, subscribe at [email protected].