1. Current list
| Provider | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Contabo GmbH | Servers that run the databases | Customer database contents; connection metadata | Germany (EU) for EU databases; United States and Asia Pacific only for databases the customer creates there | EU; data processing agreement; Standard Contractual Clauses outside the EU |
| netcup GmbH | Servers that run the databases | Customer database contents; connection metadata | EU for EU databases; United States and Asia Pacific only for databases the customer creates there | EU; data processing agreement; Standard Contractual Clauses outside the EU |
| The Constant Company, LLC (Vultr) | Encrypted backups (S3-compatible object storage), one storage prefix per database | Encrypted database backups (encrypted before upload with a key per database; Vultr cannot read them) | Netherlands (EU) for EU databases; US and Asia locations only for databases in those regions | Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Payments, invoices, tax calculation | Company name, billing email, country, VAT id, card details (held by Stripe only) | Ireland (EU); Stripe, Inc. in the US | EU; Standard Contractual Clauses and Data Privacy Framework |
| Cloudflare, Inc. | Hosting of this website, bot protection on signup and login (Turnstile), DNS for database hostnames | IP address, browser data needed for the human check, website requests; database hostnames and server IP addresses | Global network; United States | Standard Contractual Clauses and Data Privacy Framework |
| Sendinblue SAS (Brevo) | Transactional email: verification, password reset, database and billing notices | Email address, the content of those emails | France (EU) | EU; data processing agreement |
2. Run by us, no third party
Monitoring, metrics and logs run on our own servers. TLS certificates come from Let's Encrypt, which receives only public host names.