Sitedrive subprocessors
Last updated: 1 November 2026
Sitedrive Oy uses the following providers to deliver the Sitedrive service. Each one processes personal data only as needed for the purpose listed, under a written data processing agreement with Sitedrive. We tell customers about new subprocessors in advance, as the customer agreement sets out, and customers can object to them.
Subprocessors for customer data
| Subprocessor | What it does | Personal data involved | Where | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud Platform (Google Cloud EMEA Ltd) | Hosting: compute, database, file storage, logging, data warehouse | All application data | EU: Finland (europe-north1); backups in another EU region | — |
| Google Cloud Vertex AI (Google Cloud EMEA Ltd) | AI features, used only if the customer switches them on | The minimum extract each AI feature needs, e.g. task names for AI schedule import. Not used for training. | EU (EU multi-region) | — |
| Google Firebase Authentication (Google) | Sign-in | Email address, user ID, sign-in metadata | Global, including the US | Google Cloud DPA, EU–US Data Privacy Framework, SCCs |
| Google Firebase Cloud Messaging (Google) | Push notifications to the mobile apps (delivered through Apple Push Notification service on iOS) | Device token, notification content | Global, including the US | Google Cloud DPA, EU–US Data Privacy Framework, SCCs |
| Cloudflare | DNS, TLS, web application firewall, DDoS protection, content delivery | Traffic metadata (IP address, URL, time). Request and response contents are not stored. | Global edge network; EU-only processing available by agreement | Cloudflare DPA, SCCs, EU–US Data Privacy Framework |
| PostHog | Product analytics and error monitoring | Pseudonymous user ID, usage events, device and browser type, errors | EU (PostHog EU Cloud) | — |
| Resend | Transactional email: sign-in codes, invitations, notifications | Email address, message content | EU | — |
| HubSpot | In-app support chat and customer communication | Name, email, company, chat messages | US | EU–US Data Privacy Framework, SCCs |
| Production Flow Oy | Onboarding and customer success for the accounts it serves | Data in those customer accounts, as needed for the service | Finland | — |
Other providers Sitedrive uses
These don't process the contents of customer accounts. They're listed for transparency.
| Provider | What it does | Personal data involved | Where |
|---|---|---|---|
| Slack | Internal notifications to Sitedrive staff, e.g. about new trial signups | Name and email of the person who signed up | US (EU–US Data Privacy Framework) |
| GitHub | Source code and development | No customer data | US |
| HashiCorp Terraform Cloud | Infrastructure management | No customer data | US |
Questions about subprocessors: dpo@sitedrive.com. See also our Data Processing Agreement and Privacy Policy.