Legal information
Sub-processors and providers
The providers that process personal data to run Patcharo, their role, where processing takes place and the safeguards that frame transfers.
Archived version, replaced on 24 Oct 2026. Read the version in force
Version of 23 Oct 2026
1. Sub-processors for Customer Data
The following providers process Customer Data on the Publisher's behalf, under the data processing agreement. They also process the data the Publisher is responsible for (accounts, security, service e-mails), described in the privacy policy.
| Provider | Role | Data concerned | Place of processing | Safeguards |
|---|---|---|---|---|
| Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, United States | Hosting and execution of the application, delivery of pages, protection against attacks and bots | All data exchanged with the site and the application while in transit and processed | Cloudflare's global network: a request may be processed in a data centre outside the European Union | Cloudflare's data processing addendum (version 6.4), the European Commission's standard contractual clauses; Cloudflare, Inc. participates in the EU–US Data Privacy Framework |
| Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, on Amazon Web Services infrastructure | Database and authentication | Accounts, Workspaces and Customer Data | Database and authentication in Paris (AWS region eu-west-3); access possible from Singapore or the United States for the provider's support and operations | Supabase's data processing addendum (version 1), the European Commission's standard contractual clauses |
| Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, United States | E-mail delivery: account confirmation, password reset, alerts | Recipient address and e-mail content, including the Workspace and device names and the watch labels or watched IP addresses that appear in an alert | United States; content and delivery logs kept for 30 days by the provider | Resend's data processing addendum, standard contractual clauses; Plus Five Five, Inc. participates in the EU–US Data Privacy Framework |
| Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands | Mailboxes of the @patcharo.com addresses (support, contact, security) | Content of the e-mails you send us and of our replies | Zoho's data centres in the European Union (Netherlands, Ireland) | Provider established in the European Union; occasional access by its support team from India is covered by standard contractual clauses |
2. Other providers
| Provider | Role | Data concerned | Place of processing | Safeguards |
|---|---|---|---|---|
| Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland | Online payment and invoices, once online payment opens | Customer's identity and billing address, VAT number, owner's e-mail, payment method, payments and invoices; no Customer Data | Ireland, with transfers to Stripe, LLC in the United States | Stripe's data processing agreement and its transfer clauses; Stripe, LLC participates in the EU–US Data Privacy Framework. Stripe also acts as a controller for its own obligations (fraud and anti-money-laundering) |
| Mistral AI, 15 rue des Halles, 75001 Paris, France | Machine translation, between French and English, of public texts from the vulnerability sources | Public texts only (vulnerability descriptions, published advisories): no Customer Data and no account data is sent to it | Data hosted in the European Union by default; the place of computation is not guaranteed by the endpoint used; texts kept for 30 days by Mistral AI for abuse detection | Not applicable: no personal data of Users or Customers |
3. Changes of providers
The Publisher informs Customers of any addition or replacement of a sub-processor of Customer Data at least 30 days in advance, by e-mail to the owner of each Workspace and by updating this page. The Customer may object on reasonable data protection grounds, as set out in the data processing agreement. Each version of this page is dated and remains available.
A copy of the safeguards framing a transfer can be obtained on request at contact@patcharo.com.