This page lists the third parties Witnium engages to assist in providing the Services. Each is bound by a written agreement that imposes data protection obligations consistent with the Witnium Data Processing Agreement and Article 28 GDPR.
We will update this page at least 30 days before adding or replacing a sub-processor. Customers can monitor changes through the change log at the foot of this page.
Infrastructure and hosting
| Provider | Purpose | Location of processing | Categories of data |
|---|---|---|---|
| Hetzner Online GmbH | PurposeCloud infrastructure for the accounts service, the chain-api, and supporting databases | Location of processingGermany (EU-only deployment); the legal entity is based in Gunzenhausen, Germany | Categories of dataAll categories listed in DPA Annex 1, in encrypted form at rest and in transit |
| Cloudflare, Inc. | PurposeDNS, content delivery, web application firewall, DDoS mitigation | Location of processingGlobal edge network (data routed through nearest edge); EU-U.S. Data Privacy Framework and SCCs in place | Categories of dataConnection metadata, IP addresses |
Payment processing
| Provider | Purpose | Location of processing | Categories of data |
|---|---|---|---|
| Stripe Payments Europe Ltd. | PurposePayment processing, subscription billing, invoicing, tax determination | Location of processingIreland (with onward transfer to Stripe, Inc., USA, under EU-U.S. Data Privacy Framework and SCCs) | Categories of dataBilling data, transaction data, payment method tokens; Stripe acts as an independent controller for fraud prevention purposes under its terms |
Communications
| Provider | Purpose | Location of processing | Categories of data |
|---|---|---|---|
| Resend, Inc. | PurposeTransactional email delivery (verification, password reset, security notices, billing receipts) | Location of processingEU region; EU-U.S. Data Privacy Framework and SCCs in place | Categories of dataRecipient email address, message content of transactional emails |
Product analytics
| Provider | Purpose | Location of processing | Categories of data |
|---|---|---|---|
| PostHog, Inc. | PurposeProduct usage analytics for the Website and the authenticated dashboard | Location of processingEU region (eu.posthog.com); EU-U.S. Data Privacy Framework and SCCs in place | Categories of dataPseudonymous usage data, device and connection data |
Error monitoring
| Provider | Purpose | Location of processing | Categories of data |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | PurposeApplication error monitoring and performance instrumentation | Location of processingEU region; EU-U.S. Data Privacy Framework and SCCs in place | Categories of dataStack traces, connection metadata, account identifiers |
Change log
| Date | Change |
|---|---|
| 25 May 2026 | ChangeInitial publication |
End of document
Questions? Talk to us before you sign.
© 2026 Witnium Technologies AB · 559416-7453
Tyska Skolgränd 4 · 111 31 Stockholm · Sweden