Security, data and GDPR
Which sub-processors do you use?
OVHcloud (hosting and backups), Cloudflare (network, security and protection against attacks), Brevo (transactional emails) and the browsers' push notification services. Stripe handles payments.
| Provider | Role | Data location |
|---|---|---|
| OVH SAS (OVHcloud), France | Application, databases, files, backups, self-hosted audience measurement | EEA |
| Cloudflare | DNS, proxy, TLS encryption, caching, protection against attacks | Global network; data in transit possibly outside the EEA |
| Brevo (Sendinblue SAS), France | Invitation, notification and reset emails | EEA |
| Push services (Google, Apple, Mozilla) | Delivery of encrypted notifications | Possibly outside the EEA |
Stripe (Ireland) is involved in our own payment processing. Any addition or replacement of a sub-processor is announced to you at least 30 days in advance. The up-to-date list is public: apps.cloketa.eu/legal/subprocessors (opens in a new window).
Reference : Annex 1 §5, Annex 2 B, Annex 2 C of the terms and conditions