LEGAL · GDPR ARTICLE 28
Subprocessors
HowlOps runs on independent, geographically separate EU regions for maximum stability and resilience. The third-party services below help deliver the platform. Controllers are notified 30 days before any new subprocessor is added; the objection window is 30 days per the DPA. Last updated: 2026-06-29.
| Vendor | Purpose | Location | Transfers |
|---|---|---|---|
| Hetzner Online GmbH | Primary compute, storage and database hosting — run across independent, geographically separate regions for resilience | Nuremberg + Helsinki + Falkenstein (DE / FI) | EU only |
| Cloudflare, Inc. | Edge DNS, reverse proxy, load balancing + DDoS protection | Global | EU → US (SCCs) |
| Amazon Web Services EMEA SARL | Encrypted database backups (S3), secrets storage (SSM) and additional independent probe vantage points | Frankfurt / Ireland (EU) + N. California + Singapore | EU + US (SCCs) |
| Stripe Payments Europe Ltd | Subscription billing + VAT collection | Ireland | EU + US (SCCs) |
| Twilio Ireland Ltd | SMS + voice alert dispatch, only when a customer configures it for their account | Ireland + US | EU + US (SCCs) |
| Apple Inc. (APNs) + Google LLC (FCM) | Mobile push-notification delivery for the HowlOps app | US | EU → US (SCCs) |
| Google Ireland Ltd (Google Analytics) | Marketing-site analytics, loaded only after cookie consent | EU + US | EU → US (SCCs) |
Object to a new subprocessor: [email protected].