# Subprocessors

The service providers Sitedrive Oy uses to deliver the Sitedrive service, what each one does and where.

Language: en
Canonical: https://sitedrive.com/subprocessors

## Sitedrive subprocessors

**Last updated:** 1 November 2026

Sitedrive Oy uses the following providers to deliver the Sitedrive service. Each one processes personal data only as needed for the purpose listed, under a written data processing agreement with Sitedrive. We tell customers about new subprocessors in advance, as the customer agreement sets out, and customers can object to them.

## Subprocessors for customer data

Subprocessor

What it does

Personal data involved

Where

Transfer safeguard

**Google Cloud Platform** (Google Cloud EMEA Ltd)

Hosting: compute, database, file storage, logging, data warehouse

All application data

EU: Finland (europe-north1); backups in another EU region

—

**Google Cloud Vertex AI** (Google Cloud EMEA Ltd)

AI features, used only if the customer switches them on

The minimum extract each AI feature needs, e.g. task names for AI schedule import. Not used for training.

EU (EU multi-region)

—

**Google Firebase Authentication** (Google)

Sign-in

Email address, user ID, sign-in metadata

Global, including the US

Google Cloud DPA, EU–US Data Privacy Framework, SCCs

**Google Firebase Cloud Messaging** (Google)

Push notifications to the mobile apps (delivered through Apple Push Notification service on iOS)

Device token, notification content

Global, including the US

Google Cloud DPA, EU–US Data Privacy Framework, SCCs

**Cloudflare**

DNS, TLS, web application firewall, DDoS protection, content delivery

Traffic metadata (IP address, URL, time). Request and response contents are not stored.

Global edge network; EU-only processing available by agreement

Cloudflare DPA, SCCs, EU–US Data Privacy Framework

**PostHog**

Product analytics and error monitoring

Pseudonymous user ID, usage events, device and browser type, errors

EU (PostHog EU Cloud)

—

**Resend**

Transactional email: sign-in codes, invitations, notifications

Email address, message content

EU

—

**HubSpot**

In-app support chat and customer communication

Name, email, company, chat messages

US

EU–US Data Privacy Framework, SCCs

**Production Flow Oy**

Onboarding and customer success for the accounts it serves

Data in those customer accounts, as needed for the service

Finland

—

## Other providers Sitedrive uses

These don't process the contents of customer accounts. They're listed for transparency.

Provider

What it does

Personal data involved

Where

**Slack**

Internal notifications to Sitedrive staff, e.g. about new trial signups

Name and email of the person who signed up

US (EU–US Data Privacy Framework)

**GitHub**

Source code and development

No customer data

US

**HashiCorp Terraform Cloud**

Infrastructure management

No customer data

US

Questions about subprocessors: [dpo@sitedrive.com](mailto:dpo@sitedrive.com). See also our [Data Processing Agreement](https://sitedrive.com/dpa) and [Privacy Policy](https://sitedrive.com/privacy).