Subprocessor (contracting entity)

Service & Purpose

Processing location

Transfer outside the EEA

Source

Featurebase — CORDNET OÜ (Estonia)

Customer feedback, roadmap, support communications (SOC 2 Type II certified)

Primarily within the European Economic Area (EEA); limited processing outside the EEA by authorised subprocessors

Yes — EU Standard Contractual Clauses (SCCs), in accordance with Featurebase's DPA

Subprocessors, Data Processing Agreement

Google Cloud Platform — Google Cloud EMEA Limited (Ireland)

Hosting, document processing (ISO 27001 + SOC 2 Type II certified)

europe-west4 (Netherlands)

No — processing in an EU data centre; potential access from the US by Google LLC is covered by the applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs)

Subprocessors, Data Processing Agreement

Microsoft (Microsoft 365, Azure) — Microsoft Ireland Operations Limited (Ireland)

Hosting, document processing, CRM, correspondence, internal collaboration (including email, chat, document storage) (ISO 27001 + SOC 2 Type II certified)

West Europe (Netherlands)

No — processing takes place in an EU data centre; potential access from the US by Microsoft Corporation is covered by the applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs)

Subprocessors, Data Processing Agreement

Storecove — Datajust B.V. (Netherlands)

Receipt of incoming e-invoices via the Peppol network (ISO 27001 certified)

European Union (Ireland)

No — processing in an EU data centre; potential access from the US by Amazon Web Services Inc. is covered by the applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs)

Written, signed Data Processing Agreement (DPA)

Twilio SendGrid, Programmable Messaging — Twilio Inc. (United States)

Sending and receiving emails and SMS messages (ISO 27001 + SOC 2 Type II certified)

United States / worldwide

Yes — EU Standard Contractual Clauses (SCCs), in accordance with Twilio's DPA, supplemented by Twilio Inc.'s DPF certification

Subprocessors, Data Processing Agreement, DPF Certification