legal
Sub-processors
Last updated 13 October 2026
current list
- Contabo GmbH
- hosting (server and database)
- Germany · EU — no transfer
- Google LLC (Firebase Authentication)
- organizer sign-in
- United States · SCCs + EU–US DPF
- Stripe Payments Europe Ltd
- subscriptions and payments
- Ireland (US parent) · SCCs + EU–US DPF
- Scaleway SAS
- sending invitations, reminders and confirmations by email
- France (Paris) · EU — no transfer
- ONLINECITY.IO ApS (GatewayAPI)
- sending invitations, reminders and confirmations by text message (SMS)
- EU (Denmark) · EU — no transfer
- Cloudflare, Inc.
- DNS and email routing for kairobot.work addresses
- global network · SCCs + EU–US DPF
- Google Ireland Ltd (Google Workspace)
- our support mailbox, which receives email sent to our addresses
- EU / United States · SCCs + EU–US DPF
| Provider | Purpose | Location | Transfer basis |
|---|---|---|---|
| Contabo GmbH | hosting (server and database) | Germany | EU — no transfer |
| Google LLC (Firebase Authentication) | organizer sign-in | United States | SCCs + EU–US DPF |
| Stripe Payments Europe Ltd | subscriptions and payments | Ireland (US parent) | SCCs + EU–US DPF |
| Scaleway SAS | sending invitations, reminders and confirmations by email | France (Paris) | EU — no transfer |
| ONLINECITY.IO ApS (GatewayAPI) | sending invitations, reminders and confirmations by text message (SMS) | EU (Denmark) | EU — no transfer |
| Cloudflare, Inc. | DNS and email routing for kairobot.work addresses | global network | SCCs + EU–US DPF |
| Google Ireland Ltd (Google Workspace) | our support mailbox, which receives email sent to our addresses | EU / United States | SCCs + EU–US DPF |
recent changes
13 October 2026 — GatewayAPI (ONLINECITY.IO ApS, Odense, Denmark) added for text messages. It receives a guest’s phone number and the message text only, and processes them in the EU.
changes
We announce a new or replacement sub-processor on this page at least 30 days before it processes personal data, and email account owners. Organizations can object as set out in our data processing agreement.