A sub-processor is a provider that Sway SRL uses to run openshield and that handles data on its behalf. This list is part of the data processing agreement.
The list
| Sub-processor | What it does for us | Where | Safeguard for transfers outside the EU |
|---|---|---|---|
| Cloudflare, Inc. (United States) | The website, the dashboard and the front door of the API; the databases and file storage; the secure tunnel to the checking server; bot protection on sign-in forms (Turnstile); transactional email | Data at rest in the European Union. Requests are handled in the Cloudflare location closest to the visitor, which can be outside the EU | EU-U.S. Data Privacy Framework, with the standard contractual clauses of Cloudflare's data processing addendum if the certification lapses |
| Hetzner Online GmbH (Germany) | The server that checks images and texts, in memory; the server that receives our error reports and checks that the service is up | The checking server in Nuremberg, Germany; the error reports and the uptime checks in Nuremberg, Germany | None needed: the servers are in the European Union |
| Stripe (payments) | Payments, subscriptions, invoices and tax calculation | Stripe Payments Europe, Limited (Ireland), with processing in the European Union and the United States | EU-U.S. Data Privacy Framework, with the standard contractual clauses of Stripe's data transfers addendum if the certification lapses |
Cloudflare publishes its own list of sub-processors at cloudflare.com/gdpr/subprocessors.
What each one sees
- Content (images and texts) sent to the API passes through Cloudflare, which delivers the request, and is checked in memory on the Hetzner server. It is not stored anywhere.
- Account, organization and usage data is stored in Cloudflare's databases in the European Union.
- Payment data is handled by Stripe. We never see a card number.
- Error reports say what failed in our code, never with the content checked, an API key, a cookie or a request body, and go to a server of ours at Hetzner in Germany.
Changes to this list
We tell account owners by email at least 30 days before we add a sub-processor or replace one, and this page changes on the same day. A customer who objects for a reason related to data protection can end the subscription before the change takes effect, as the data processing agreement describes.