Sub-processor List
Last updated 20 June 2026
These are the third parties that help us run ProCafe. For each sub-processor we record the name, what they process, where, and — where outside the UK/EEA — the transfer safeguard.
| Sub-processor | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Cloud hosting (application + database) | Germany (EEA) | Within EEA — no additional transfer mechanism needed |
| Stripe Payments Europe, Ltd. (with Stripe, Inc.) | Subscription billing & card payment processing. Card details are entered directly with Stripe — ProCafe never receives or stores full card numbers. | Ireland (EEA), with Stripe, Inc. (United States) | EU Standard Contractual Clauses for any US transfer, per Stripe's DPA |
| Resend, Inc. | Transactional account email: verification and password reset | United States (provider) | Contractual transfer safeguards under provider terms |
| Google Ireland Limited (Google Analytics) | Website analytics on our PUBLIC pages only (marketing, help, legal, security) to understand visits and traffic. Not loaded in the signed-in app or the internal admin area. | Ireland (EEA), with Google LLC (United States) | EU Standard Contractual Clauses for any US transfer, per Google's terms |
| Functional Software, Inc. (Sentry) | Error monitoring: server error reports (error type, message, stack trace, route pattern). Configured to exclude request bodies, headers and personal data. | United States (EU data residency available) | EU Standard Contractual Clauses, per Sentry's DPA |
Changes
We give advance notice before adding or changing a sub-processor. Where the Data Processing Agreement provides it, a customer who reasonably objects can raise it and, failing resolution, terminate.