Subprocessors. Documented and public.

Our subprocessor list is public and kept current. GDPR article 28 compliance.

• 01Infomaniak (Switzerland) — infrastructure and email hosting. European storage and jurisdiction.
• 02Stripe — payments. PCI-DSS level 1 compliance.
• 03Bridge API — open banking, ACPR-licenced (n°16798).
• 04Wasabi (EU) — object storage for encrypted backups.
• 05Cloudflare — DNS only. No proxy, no third-party WAF.
• 06Update: this list is reviewed at every subprocessor add/remove and notified to clients under DPA.

section being written · detailed content coming soon