# Sub-processors and service providers

European-only. Every vendor in the data path is EU-incorporated.

## Sub-processors

These services process personal data on your behalf. All are EU-incorporated and covered by our [DPA](/dpa). This is the list referenced in DPA section 6.2.

| Service | Purpose | Location |
|---|---|---|
| [Scaleway](https://www.scaleway.com) | Compute, object storage, managed PostgreSQL, container registry, transactional email | Paris, France |
| [Hetzner](https://www.hetzner.com) | Backup storage | Falkenstein, Germany |
| [Mollie](https://www.mollie.com) | Payment processing | Amsterdam, Netherlands |
| [Crisp](https://crisp.chat) | In-app support chat | Nantes, France |

## Other service providers

These services support our operations but do not process Customer Data.

| Service | Purpose | Location | Jurisdiction |
|---|---|---|---|
| [Proton Mail](https://proton.me) | Corporate email (@codebahn.net) | Geneva, Switzerland | EU adequacy decision |
| [Oh Dear](https://ohdear.app) | Status page and uptime monitoring | Antwerp, Belgium | EU |
| [Plausible](https://plausible.io) | Website analytics (no personal data collected) | Falkenstein, Germany | EU (Estonia) |

## Infrastructure details

Primary infrastructure runs in Scaleway's `fr-par` region (Paris). Backups live on Hetzner in Falkenstein, Germany: a separate provider in a separate region. They run daily and are verified weekly by a real restore. Repositories, the database and secrets are encrypted client-side with Restic before they leave Scaleway.

Data is encrypted in transit (TLS 1.2+, TLS 1.3 where supported) and at rest (AES-256). Server logs with IP addresses are kept for 30 days. Billing records are kept for seven years, as Swedish bookkeeping law requires.

Last reviewed: September 2026.