Sub-processors
Last updated: 5 October 2026
| Sub-processor | Purpose | Company location | Data location |
|---|---|---|---|
| Hetzner Online GmbH | Servers and databases | Germany | Germany |
| Backblaze, Inc. | Encrypted database backups | United States | Netherlands (EU) |
| Cloudflare, Inc. | DNS, TLS termination, DDoS protection | United States | Transit only, not stored |
| Stripe | Payment processing for account billing (account holders' billing details only; no contact lists) | Australia / United States | Per Stripe's data processing agreement |
Safeguards
Each sub-processor is bound by a data processing agreement; US-based providers are covered by Standard Contractual Clauses (with the UK Addendum) and, for Cloudflare, the EU-U.S. Data Privacy Framework with UK Extension. Customers are told before a sub-processor is added or replaced.
Customer-connected providers
Where a customer connects its own delivery provider (for example its own email, SMS or messaging account), we send the data needed for that delivery to the provider the customer chose, on the customer's instruction. That provider works under the customer's own agreement with it and is not a Spotzee sub-processor.
Sendmux is a brand of the same company.