Subprocessors
Companies that process personal data on our behalf to run Mergehand.
| Subprocessor | Purpose | Location | Transfer outside the EEA |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the server, database, run files and backups | Falkenstein, Germany | No |
| Amazon Web Services EMEA SARL (Amazon SES) | Sending service emails | Frankfurt, Germany | Possible access by the US parent company – EU–US Data Privacy Framework, standard contractual clauses |
| Cloudflare, Inc. | DNS, receiving and forwarding emails to our addresses, sign-up protection (Turnstile) | Global network | EU–US Data Privacy Framework, standard contractual clauses |
| Infomaniak Network SA | Our support mailbox | Switzerland | Switzerland – adequacy decision of the European Commission |
| Google Ireland Limited (Google Analytics) | Measuring visits to the website mergehand.com, only after the visitor accepts analytics cookies | Ireland; Google data centers worldwide | Possible transfer to Google LLC in the US – EU–US Data Privacy Framework, standard contractual clauses |
Not subprocessors
- Sold through Link, LLC and Stripe sell and invoice subscriptions as merchant of record. They process payment data as independent controllers.
- Services you connect yourself – Anthropic (Claude Code on your runner under your own account), GitLab, GitHub, Bitbucket, YouTrack, Trello and chat webhooks to Slack, Mattermost or Microsoft Teams – process data under your own agreements with them.
Changes
We email owners and admins of every organization at least 14 days before we add or replace a subprocessor, and update this page. How to object is in section 3 of the Data Processing Agreement.