Subprocessors (DRAFT)

Update this list before you use a new provider. Keep the data in the EU where possible.

Subprocessor	Service	Data location	Data
[Server provider, e.g. Oracle Cloud / Hetzner]	servers that run the shops	[EU region, e.g. Milan]	all shop data
Cloudflare, Inc.	DNS, HTTPS proxy, firewall (Cloudflare for SaaS)	global network; EU data localisation not on the free plan	visitor requests, IP addresses
Backblaze, Inc. (B2)	encrypted backups	[EU region, e.g. Amsterdam]	encrypted backups (Backblaze can not read them)
GitHub, Inc.	source code and container images	USA	shop code (no customer data)
Stripe Payments Europe Ltd.	payment of our invoices	EU / USA	customer billing data (not the shop's customers)
[Email provider]	system emails of the shops (optional)	[EU]	email addresses, email content
[Uptime monitoring, e.g. UptimeRobot]	external availability checks	[region]	shop URLs only