Subprocessors / International Data Transfers
Legal document versionsVersion: 2026-10-15-review-2 · Effective date: October 15, 2026
A consolidated convenience copy of the current published documents. Each document retains its own version and effective date. The versioned legal pages and archive remain authoritative.
On this page
Current and conditional services
The current personal-data processors below are supported by repository operational documentation and checked local production configuration: hosting, object storage, encrypted backups and email/mailbox. Maps and AI processing are listed separately as conditional on using those features. Monitoring is listed as a separate operational service because application user/request content is stripped. Configuration establishes intended wiring, not a live traffic audit or evidence of signed provider contracts. No payment provider is currently listed as a platform-billing processor.
Processing outside Egypt
Hosting, storage, email, maps, monitoring and AI services may process information outside Egypt. The list is operational disclosure, not a claim that all required contracts, licences or transfer permissions have been obtained. Contact [email protected] about locations, safeguards or proposed changes before sensitive processing.
Current provider registry
Current personal-data processors
Hetzner · Active
Application hosting and PostgreSQL
Information involved: Stored application data and operational traffic
Processing location: Actual server location requires confirmation
Cloudflare · Active
R2 public/private object storage and DNS
Information involved: Media, private uploads, stored files and DNS traffic
Processing location: R2 placement not verified; no Egypt residency guarantee
Backblaze B2 · Active
Encrypted independent backups
Information involved: Encrypted database and object recovery copies
Processing location: Configured endpoint: eu-central-003; physical storage country and provider-side version retention not independently verified.
Amazon Web Services SES · Active
Transactional email delivery
Information involved: Recipient addresses and email content
Processing location: Configured SMTP region: eu-central-1 (Frankfurt region identifier); provider-wide secondary processing/contract terms not verified.
Zoho Mail · Active
Support mailbox and synchronization
Information involved: Correspondence, sender details and attachments
Processing location: Documented .com tenant; exact processing location unverified
Feature-dependent processing
Google Maps Platform · Conditional on feature use
Maps, Places and geocoding when used
Information involved: Location queries, map interaction and network information
Processing location: Provider infrastructure; exact processing locations unverified
OpenAI · Conditional on feature use
Conditional AI-assisted import analysis when requested and configured; not every Person record is sent.
Information involved: Selected uploaded import data and prompts
Processing location: API processing location and contractual settings require confirmation
Other operational services
Better Stack · Operational service
Sanitized exception monitoring, uptime and job heartbeats
Information involved: Sanitized stack/release metadata, static route tags and availability signals. Application removes user/request payloads; provider handling of source IP/network metadata remains unverified.
Processing location: Processing region unverified