Subprocessors
Last updated: 2026-10-10 · version 1
Draft – not yet legally reviewed. This text is a skeleton. Everything in square brackets will be completed before launch. The German version is authoritative.
For business customers, SafeDoc processes files as a processor under Art. 28 GDPR. The following service providers (subprocessors) help us do so. They are contractually bound to the same data protection obligations.
For orientation only, not legal advice: this list is a draft and will be completed before launch.
Current list (version 1, effective 2026-10-10)
| Provider | Purpose | Location of processing |
|---|---|---|
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen | Data centre: servers, database and object storage for the files | Germany |
| [PLACEHOLDER email delivery service – not yet selected] | Sending system emails (sign-in, invitations, sharing notices) | EU planned |
Payment services (Stripe, PayPal) and the Google, Apple or Microsoft sign-in providers are not on this list: they do not process our customers’ files and are controllers in their own right. They are listed in the privacy policy.
How you learn about changes
We announce new or changed subprocessors at least 30 days in advance – on this page and, for business customers with a data processing agreement, additionally in text form. You may object for an important data protection reason; details are set out in the data processing agreement, which organisations conclude in their organisation settings.
Change history
- Version 1 · published 2026-10-10, effective 2026-10-10 – First list (draft, together with DPA draft 1.0).