Trust / Last updated
Sub-processors
The third parties that process personal data on behalf of Nordtally, what they do and where.
These are the companies that process personal data when we provide Nordtally, whether for our customers or for our own account data. The list is short on purpose. It forms Annex 3 of the data processing agreement.
Current sub-processors
| Sub-processor | Purpose | Location | Event data? |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of all servers and databases, and storage of encrypted backups | [Data centre country], EU. Company based in Germany | Yes |
| Sendaro | Transactional email: sign-in links, invitations, account notices and aggregate reports | EU | No |
| Amazon Web Services EMEA SARL (Amazon SES, used by Sendaro) | Email delivery | EU region. Company based in Luxembourg, US parent company | No |
Event data means the statistics collected from visitors to our customers’ websites. It is stored and processed only in the EU, and is never transferred outside the EU/EEA.
About the Amazon row. Sendaro sends email through Amazon SES in an EU region, so the email data stays in the EU. Amazon’s US parent company is subject to US law, including the CLOUD Act, which is why we list it. It handles account email only: names, email addresses and the content of the emails we send. It never receives event data.
Planned
Nordtally is free during the beta and processes no payments. Before paid plans start we will add a payment provider (Stripe or Paddle). It will receive billing details only, never event data. We will update this page and notify customers before it starts processing personal data, as described in the data processing agreement.
Services that are not sub-processors
For completeness, these services are part of how we build and run Nordtally but do not process personal data on our customers’ behalf:
- GitHub hosts our source code, runs our build and deployment pipeline and stores our container images. The images contain code only, no customer or event data.
- DB-IP provides the country database we use to look up a visitor’s country. We download the database and query it in memory on our own servers; no data is sent to DB-IP.
- Error tracking runs on our own EU servers (self-hosted GlitchTip), with personal data scrubbed before storage.
Changes to this list
We announce new sub-processors to customers at least [30] days before they start processing personal data, by email to workspace owners and on this page. Customers may object as described in the data processing agreement. The date at the top of this page shows the last change.
Other documents: Privacy policy, Terms of service, Data processing agreement.