This document is a working draft until it has been reviewed by our lawyers before launch. The binding version will be published here and dated.
This is the provisional list for launch. Changes are announced to workspace owners 30 days in advance.
| Subprocessor | Purpose | Location of processing |
|---|---|---|
| Hetzner Online GmbH | Hosting: application servers and databases | Germany (EU) |
| Backblaze, Inc. | Object storage for attachments and encrypted backups | EU Central data region (EU) |
| Amazon Web Services EMEA SARL | Sending and receiving email for workspaces (Amazon SES) | EU region |
| Postmark (ActiveCampaign, LLC) | System emails: sign-up, verification, password reset, invoices | United States (SCCs) |
| Anthropic, PBC | AI features, only when enabled, on masked text, not used for training | United States (SCCs) |
| Paddle.com Market Ltd | Payments, invoices and sales tax, as merchant of record | United Kingdom (adequacy) |
Messaging providers you connect yourself (for example WhatsApp, SMS gateways, Facebook and Instagram) process messages under your own agreement with them.
Website analytics run on our own servers (no subprocessor). Plausible Analytics (EU), if we ever turn it on, only covers visitors of chaosdesk.io who consent, not workspace data.