Last updated: October 2026
Sub-processors
A sub-processor is a third party we engage to process personal data on your behalf. We keep the list short. This page is the canonical list referenced by our Data Processing Addendum and Privacy Policy.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Hetzner Online GmbH | Hosts our application and email delivery services | Germany & Finland (EU/EEA) | None — within EEA |
| UpCloud UpCloud Ltd | Hosts our website and dashboard, our managed application database, and object storage (database and storage encrypted at rest) | Germany & Finland (EU/EEA) | None — within EEA |
| Mistral AI Mistral AI SAS | Abuse screening: classifies the subject, sender name and domain, text and linked domains of messages from new accounts for spam and phishing. Recipient addresses are not sent. Zero data retention — nothing is stored after the response and nothing is used to train models | European Union (EU/EEA) | None — within EEA |
| Better Stack BetterStack s.r.o. | Monitors the uptime of our public endpoints | Czech Republic (EU/EEA) | None — within EEA |
| Sentry Functional Software, Inc. | Application error and performance diagnostics | Germany (Sentry EU region) | EU–U.S. Data Privacy Framework, with SCCs as fallback |
| Cloudflare Cloudflare, Inc. | DNS and edge security in front of our website and dashboard (carries page traffic in transit, stores none of it), signup bot check, and routing of our inbound operational mail, including bounce and complaint reports about your email | United States | EU–U.S. Data Privacy Framework, with SCCs as fallback |
Not a sub-processor: Polar
Polar (Polar Software, Inc., USA) is the seller of record for eusend purchases. It processes your billing data as an independent data controller in its own name — not as our sub-processor — so it is listed here for transparency but is not part of the list above.
Polar handles billing only. It never receives the emails you send, who you send them to, your contacts, your domains, your logs or your API keys — none of that leaves the EU infrastructure listed above. See our Privacy Policy for details.
Changes to this list
We will notify you at least 14 days before adding or replacing a sub-processor that processes customer personal data, by email to your account owners and on this page. To object on reasonable data-protection grounds, email privacy@eusend.dev.
If a sub-processor must be replaced urgently to keep the service running or to address a security risk, we may make the change straight away and notify you as soon as we can.