Subprocessors
Every third party that can touch data on our behalf, and what it does.
Version 1.0 In force since Aug 21, 2026 Updated Aug 24, 2026
We keep the list short on purpose: each name here is one more party with access, and the cheapest way to protect data is not to hand it over. Each is bound by a written contract with obligations no weaker than those in our Data Processing Addendum.
| Subprocessor | What it does | Data it can reach |
|---|---|---|
| Quathos Account | Identity hub: account creation, sign-in and subscription entitlements | Name, email, account and organisation identifiers, plan |
| Qsendyx | Delivers every transactional email, including proposals, and verifies lead email addresses | Recipient name and email, message content, delivery events, lead email address submitted for verification |
| Qsignyx | Produces and stores electronic signatures for proposals | Signer name and email, document content, signature evidence |
| Stripe | Checkout, subscriptions and invoices | Billing contact, payment details you give directly to Stripe, subscription and invoice records. Card numbers never reach us |
| Hetzner Online GmbH | Runs the application, the database, object storage and backups | All workspace data at rest |
Webhooks and API integrations you configure yourself are not subprocessors of ours: they are your instruction to send your data somewhere you chose, and what happens on the other end is governed by your agreement with that party. The same holds in the other direction: when you connect a form tool, a marketing platform or an advertising account to capture leads, that data flows from your account into your workspace, under your agreement with that provider. We hold the credential you gave us, encrypted, and use it only to read the leads you asked us to read.
Notice of changes
We announce a new or replacement subprocessor at least 30 days before it starts processing, by email to account holders and by updating this page. Your right to object is set out in the Data Processing Addendum. To be notified, write to [email protected].