This is the list referred to in Section 14.1 of our Terms and Conditions, which contain our data processing agreement, and in our Privacy Policy. Accepting the Terms is your general authorization for us to engage these providers.
| Provider | Purpose | Whose data | Location | Transfer safeguard |
|---|---|---|---|---|
| Contabo GmbH | Hosting of the application and all stored data; synthetic monitoring test locations | Account holders, website visitors, people named on monitored pages | Germany (EU); some synthetic test locations in other countries | Within the EU; Standard Contractual Clauses for test locations outside the EEA |
| Cloudflare, Inc. | Delivery of our tracking scripts, object storage (including our invoice files) and backups, DNS resolution, abuse protection, our website and free tools, and Cloudflare Web Analytics on our website and documentation | Account holders, website visitors, people named on monitored pages, free-tool users | Global network, including the United States | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
| Plus Five Five, Inc. (Resend) | Sending all our email | Account holders, people invited to a workspace, newsletter subscribers | United States | Standard Contractual Clauses and EU-U.S. Data Privacy Framework |
| Stripe Payments Europe, Limited | Payments, VAT calculation and the billing portal (payment methods and billing details; it shows no invoices) | Account holders | Ireland (EU) and the United States (Stripe, LLC) | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
| KROS a.s. | Issuing and storing our invoices and credit notes, as accounting law requires; delivering e-invoices to Slovak businesses with a tax ID through the Peppol network. Our own billing records only, never data we process for you under Section 14.1 of the Terms | Paying customers: name or business name, address, tax IDs, items and amounts, without the email address | Slovakia (EU) | Within the EU |
| Anthropic Ireland, Limited | AI features: support chat answers, support reply drafts, setup suggestions, site-search themes, content-gap checks; troubleshooting from redacted logs of our systems | Account holders, Google Search Console search text, website visitors' site-search text, people named on customers' public pages | United States | Standard Contractual Clauses |
| Google LLC | Google Search Console, PageSpeed Insights and Chrome UX Report on your instruction; site icons | Account holders | United States | EU-U.S. Data Privacy Framework |
| Google Cloud EMEA Limited (Google Workspace) | Our company email, including Gemini in Google Workspace; Google Calendar and Google Meet for consultations | Anyone who emails us, account holders, consultation attendees | Stored in the EU; may be processed elsewhere, including the United States | Standard Contractual Clauses; EU-U.S. Data Privacy Framework (Google LLC) |
| Slack Technologies, LLC and SFDC Ireland Limited (Slack, a Salesforce company) | The private Slack channel of Weekly Consultations, and alert messages sent to a Slack channel you connect | Account holders who book Weekly Consultations; alert content, which can include addresses on your own website | Ireland (EU) and the United States | EU-U.S. Data Privacy Framework; Salesforce Binding Corporate Rules and Standard Contractual Clauses |
| Aut O'Mattic A8C Ireland Ltd. and Automattic Inc. (Gravatar) | Profile pictures, from a hash of the email address | Account holders | United States | Standard Contractual Clauses |
Contabo GmbH
Hosting of the application and all stored data; synthetic monitoring test locations
- Whose data:
- Account holders, website visitors, people named on monitored pages
- Location:
- Germany (EU); some synthetic test locations in other countries
- Safeguard:
- Within the EU; Standard Contractual Clauses for test locations outside the EEA
Cloudflare, Inc.
Delivery of our tracking scripts, object storage (including our invoice files) and backups, DNS resolution, abuse protection, our website and free tools, and Cloudflare Web Analytics on our website and documentation
- Whose data:
- Account holders, website visitors, people named on monitored pages, free-tool users
- Location:
- Global network, including the United States
- Safeguard:
- EU-U.S. Data Privacy Framework and Standard Contractual Clauses
Plus Five Five, Inc. (Resend)
Sending all our email
- Whose data:
- Account holders, people invited to a workspace, newsletter subscribers
- Location:
- United States
- Safeguard:
- Standard Contractual Clauses and EU-U.S. Data Privacy Framework
Stripe Payments Europe, Limited
Payments, VAT calculation and the billing portal (payment methods and billing details; it shows no invoices)
- Whose data:
- Account holders
- Location:
- Ireland (EU) and the United States (Stripe, LLC)
- Safeguard:
- EU-U.S. Data Privacy Framework and Standard Contractual Clauses
KROS a.s.
Issuing and storing our invoices and credit notes, as accounting law requires; delivering e-invoices to Slovak businesses with a tax ID through the Peppol network. Our own billing records only, never data we process for you under Section 14.1 of the Terms
- Whose data:
- Paying customers: name or business name, address, tax IDs, items and amounts, without the email address
- Location:
- Slovakia (EU)
- Safeguard:
- Within the EU
Anthropic Ireland, Limited
AI features: support chat answers, support reply drafts, setup suggestions, site-search themes, content-gap checks; troubleshooting from redacted logs of our systems
- Whose data:
- Account holders, Google Search Console search text, website visitors' site-search text, people named on customers' public pages
- Location:
- United States
- Safeguard:
- Standard Contractual Clauses
Google LLC
Google Search Console, PageSpeed Insights and Chrome UX Report on your instruction; site icons
- Whose data:
- Account holders
- Location:
- United States
- Safeguard:
- EU-U.S. Data Privacy Framework
Google Cloud EMEA Limited (Google Workspace)
Our company email, including Gemini in Google Workspace; Google Calendar and Google Meet for consultations
- Whose data:
- Anyone who emails us, account holders, consultation attendees
- Location:
- Stored in the EU; may be processed elsewhere, including the United States
- Safeguard:
- Standard Contractual Clauses; EU-U.S. Data Privacy Framework (Google LLC)
Slack Technologies, LLC and SFDC Ireland Limited (Slack, a Salesforce company)
The private Slack channel of Weekly Consultations, and alert messages sent to a Slack channel you connect
- Whose data:
- Account holders who book Weekly Consultations; alert content, which can include addresses on your own website
- Location:
- Ireland (EU) and the United States
- Safeguard:
- EU-U.S. Data Privacy Framework; Salesforce Binding Corporate Rules and Standard Contractual Clauses
Aut O'Mattic A8C Ireland Ltd. and Automattic Inc. (Gravatar)
Profile pictures, from a hash of the email address
- Whose data:
- Account holders
- Location:
- United States
- Safeguard:
- Standard Contractual Clauses
Not on this list
- MaxMind: we use its GeoLite2 database on our own servers to look up countries and places. We send it no personal data.
- Ahrefs: our server sends it the domain names looked up for Domain Rating in our browser extension, and no personal data.
- Providers you choose: your own Cloudflare account (where Server Log Monitoring deploys a Worker), the log storage you connect, and the webhooks, AI assistants and applications you send data to. You hold the relationship with them, and we act on your instruction.
Changes to this list
We give at least 7 days' notice before adding or replacing a sub-processor, by updating this page and its date. To be told by email, write to legal@vitalsentinel.com.
You may object to a change on reasonable data protection grounds. If we cannot resolve your objection, you may terminate the affected part of the Service and receive a pro rata refund, as set out in Section 14.1 of the Terms.
Jurisdiction and access requests
The application and its stored data are hosted in Germany and are subject to EU and German law, and our company to Slovak law. Some synthetic test locations and some providers process data outside the EU and are also subject to the law of those countries, including US law. We assess any request from an authority outside the EU for data we hold, refuse it unless it is compatible with EU law, and disclose only the minimum required.
Copies of safeguards
For a copy of the safeguard we rely on for a provider, email legal@vitalsentinel.com. See also our Data Processing page.