Subprocessors
Last updated: October 27, 2026
We use the providers below to operate eCourier. Only the Platform subprocessors section forms part of Appendix B of our Data Processing Agreement (DPA). eCourier acts as controller for its own billing and website activities under our Privacy Policy.
Hosting and event-data regions are distinguished from other provider processing. Registered addresses are not necessarily processing locations. Transfer bases are explained below.
Platform subprocessors
Hosting and infrastructure
Amazon Web Services
Hosting and infrastructure
Processing and provider details
Processing locations: Germany for our selected hosting and storage; see AWS's subprocessor list for service and support locations.
Transfer basis: EU SCCs for applicable third-country transfers under AWS's DPA.
Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Privacy and contact information.
Documentation: Data protection and DPA · Subprocessors
Hetzner
Hosting and infrastructure
Processing and provider details
Processing locations: Germany for our selected hosting; Hetzner's DPA specifies EU/EEA processing.
Transfers: Third-country processing requires prior authorisation and a valid transfer mechanism under Hetzner's DPA.
Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Data protection contact.
Documentation: DPA · Subprocessors
Error monitoring and diagnostics
Sentry
Error events and associated technical context
Processing and provider details
Processing locations: Frankfurt, Germany for event data; certain account, integration and organisation metadata in the US. See Sentry's documentation for further processing locations.
Transfer basis: DPF / EU SCCs under Sentry's DPA.
Provider: Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Privacy and contact information.
Documentation: DPA · Subprocessors · EU data region · Transfer safeguards
Suppliers' subprocessor lists identify further providers. Which entities process eCourier customer data depends on the services used.
Payment and billing
Stripe
Payments for eCourier's services
Processing and provider details
Processing and role: Billing, payment and transaction information. Stripe acts as processor or independent controller depending on the activity, including fraud prevention and regulatory compliance.
Processing locations: Stripe, LLC in the United States, with further processing by affiliates and service providers in other countries under Stripe's DPA.
Transfer basis: DPF / EU SCCs under Stripe's Data Transfers Addendum.
Documentation and contact: Privacy and contact information · DPA · Data Transfers Addendum · Service providers
Support and communications
Google Workspace
Email support, sales correspondence and internal business communications
Processing and provider details
Processing: Email and document content and metadata when you contact our support or sales mailboxes, and for our own account administration and customer support.
Role: Processor under Google's Cloud Data Processing Addendum.
Processing locations: Global, including the United States. Our Workspace plan does not include Google's data-regions feature, so data is not pinned to a specific region; see Google's processing-location documentation.
Transfer basis: Applicable adequacy mechanisms, including DPF, and EU SCCs where required.
Provider and contact: Google's Privacy Policy and contact information. The contracting Google entity is identified in the applicable service agreement.
Documentation: Cloud Data Processing Addendum · Subprocessors
Greentel
Phone support (hosted PBX)
Processing and provider details
Processing: Call routing and distribution metadata, such as phone numbers and call duration, according to our configured setup. The solution does not record ongoing calls, perform AI analysis of calls, or collect sensitive data.
Role: Greentel acts as an independent data controller for this processing, as the provider of the underlying telecommunications service. A data processing agreement is not required for this standard telephony solution; Greentel is not engaged as a processor of eCourier's or its customers' personal data.
Processing locations: Denmark, based on Greentel's registered place of business. Not confirmed by published documentation.
Provider: Greentel A/S, Jomfruløkken 2, 8930 Randers NØ, Denmark. CVR: 32562787. greentel.dk.
Documentation: No privacy policy or subprocessor list is currently published by Greentel.
Public website
Google Tag Manager is used across our website, including our portal and documentation.
Cloudflare hosts and delivers the public marketing website. It does not act as a reverse proxy for the platform API.
Google Tag Manager and Google Analytics
Website tag management and usage measurement
Processing and provider details
Processing: Tag delivery and technical request and diagnostic information (Tag Manager); website interactions, browser and device information and online identifiers for usage reports (Analytics).
Consent: Analytics cookie storage requires consent. See our Cookie Policy for Google's cookieless Consent Mode behaviour.
Role: Defined in Google's applicable service and data-protection terms, including processor terms for processing on our behalf.
Processing locations: Global, including the United States; see Google's terms and processing-location documentation.
Transfer basis: Applicable adequacy mechanisms, including DPF, and EU SCCs where required.
Provider and contact: Google's Privacy Policy and contact information. The contracting Google entity is identified in the applicable service agreement.
Documentation: Data Processing Terms · Subprocessors · Transfer safeguards · Tag Manager privacy information · Analytics data protection
Apollo
Website visitor identification and sales prospecting
Processing and provider details
Processing: Website activity, IP addresses, browser and device information and online identifiers to identify visiting companies and assess business interest. Tracking requires advertising consent.
Role: Processor or independent controller, depending on the activity described in Apollo's terms.
Processing locations: The United States and other countries where Apollo and its service providers operate; see its Privacy Policy.
Transfer basis: DPF / EU SCCs where required under Apollo's DPA.
Provider: ZenLeads Inc. (d/b/a Apollo.io), 440 N Barranca Ave #4750, Covina, CA 91723-1722, USA. Privacy contact: [email protected].
Documentation: Privacy Policy · DPA and transfer safeguards · Website visitor tracking
Transfers and changes
Transfer bases: SCCs are EU Standard Contractual Clauses; DPF is the EU–US Data Privacy Framework. Entries listing DPF / SCCs refer to DPF for covered US transfers and SCCs where DPF does not apply or those clauses are otherwise required, as set out in the linked provider terms.
German hosting does not establish that all support, administrative processing or further subprocessing stays in the EEA. Transfers on behalf of customers remain subject to clause 7 and Appendix C.6 of our DPA.
We notify customers of intended additions or replacements of platform subprocessors at least 10 days in advance under DPA clause 6.3, giving them an opportunity to object. Updating this page does not replace that notification.
For questions about this list or the processing relevant to your account, contact [email protected].