Subprocessor List
Last updated: January 2025
This page lists the third-party subprocessors that SPNT engages to process customer data. All subprocessors are bound by data processing agreements that meet GDPR requirements.
Current Subprocessors
Hetzner Online GmbH
Germany
Purpose
Cloud infrastructure and data hosting
Data Processed
All customer data stored on EU servers
Cloudflare, Inc.
United States (EU data processed in EU)
Purpose
DDoS protection and CDN
Data Processed
Network traffic metadata only
Stripe, Inc.
United States (EU data processed in EU)
Purpose
Payment processing
Data Processed
Payment information and billing details
Postmark (ActiveCampaign)
United States
Purpose
Transactional email delivery
Data Processed
Email addresses and message content
Notification of Changes
We will notify customers of any new subprocessors at least 14 days before they begin processing data. Customers may object to new subprocessors as described in our Data Processing Agreement.
Data Residency
For subprocessors based outside the EU, we ensure that either:
- EU customer data is processed exclusively on EU infrastructure, or
- Standard Contractual Clauses (SCCs) are in place, or
- The subprocessor is certified under an approved framework
Contact
For questions about our subprocessors, contact dpa@spnt.io.