Sub-processors

We use a small number of vetted sub-processors to run the Service, each under a data-processing contract. We publish the list here (rather than 'on request') and notify of material changes so you can object.

Current sub-processors - Hosting / infrastructure — self-hosted on our own hardware in the Netherlands (EU): compute, storage and the database run on infrastructure we own and operate. No third-party cloud provider processes your board data. - Payments — Stripe: subscription billing + tax; we never store full card numbers. - Email — Resend: transactional + notification email delivery. - Analytics — self-hosted Plausible (our own servers): cookieless, no personal data — see the Cookie Policy.

Changes We post additions/replacements here and, where required, give notice so you may object. International transfers use appropriate safeguards (e.g. Standard Contractual Clauses).