List of sub-processors — Version 1.1
In force from: 29/10/2026 · current version
Added NSS S.r.l., which develops the platform and provides its technical support; the EU-US Data Privacy Framework stated for Cloudflare and Stripe.
Sub-processors
| Sub-processor | Activity | Processing location | Basis for any transfer |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Application hosting, managed relational database, e-mail sending, serverless functions, storage | European Union — Ireland (eu-west-1) | No transfer for storage. Support access from third countries covered by Standard Contractual Clauses |
| MongoDB Ltd / MongoDB, Inc. | Managed document database holding tenant data | European Union | Standard Contractual Clauses for non-EEA support access |
| Cloudflare Ltd / Cloudflare, Inc. | Content delivery network, application and form spam protection, edge execution of the front-end | European Union, on a globally present network; some technical data (such as the IP address) also in the United States | Adequacy decision on the EU-US Data Privacy Framework, to which Cloudflare adheres; alternatively Standard Contractual Clauses |
| Stripe Payments Europe Ltd (Ireland) | Payment and recurring billing management. In respect of payment and anti-fraud data, Stripe acts as an independent controller | European Union — Ireland, with group access | Adequacy decision on the EU-US Data Privacy Framework; alternatively Standard Contractual Clauses |
| NSS S.r.l. (Milan, VAT 08528150967) | Development, maintenance and technical support of the Platform, with access to data limited to what these activities require | Italy | No transfer |
The Processor engages no further sub-processors for the processing of the Controller's data. No statistical measurement or tracking tools are active on the application or on tenants' public pages; should any be enabled, this list will be updated with the notice period set out in clause 8.3 of the DPA.
The Processor's staff act as authorised persons under Article 29 GDPR. The developers of the Platform are employees of NSS S.r.l. and access the data as staff of that sub-processor.