Subprocessor List

Version 2026-04-26
Last updated 2026-04-26

This list identifies the current core subprocessors and infrastructure providers used by Hexonis (Daniel Piringer) to operate RetentBase.

The list may be updated from time to time as the service evolves. Where required by law or contract, material subprocessor changes will be communicated through the applicable contractual process.

Personal data may be processed in the EU, Germany, or internationally depending on the provider and service path involved. Where international transfers occur, Hexonis applies a lawful GDPR transfer mechanism where required.

Scope of this list

This page lists the core third-party providers relevant to service delivery, hosting, monitoring, billing, and report email delivery. It is intended to support the Privacy Policy and Data Processing Agreement and does not replace any mandatory contractual notice process.

Change management and customer assessment

This public list is informational and focuses on core operational subprocessors. Contractual notice, objection rights, and effective dates continue to be governed by the customer contract and the Data Processing Agreement where applicable.

Each customer remains responsible for assessing whether the listed providers are appropriate for the customer's own legal, security, and procurement requirements.

Transfer safeguards

Providers marked as global or involving possible non-EEA access may involve international transfers or remote support access. Where required, these transfers are governed by Chapter V GDPR safeguards such as adequacy decisions, Standard Contractual Clauses, or another legally recognized transfer mechanism.

The region information is a practical summary, not a guarantee that every support, security, billing, or monitoring event is processed only in that region.

NameCategoryPurpose and dataRegionIntroducedWebsite

Hetzner

Hosting infrastructure

Virtual server infrastructure and application runtime hosting.

Hosted application data, system metadata, and operational infrastructure data.

DE2026-03-26https://www.hetzner.com

Supabase

Database and authentication

Managed PostgreSQL, authentication, and storage infrastructure.

Account data, workspace data, cancellation records, and related application data.

EU2026-03-26https://supabase.com

Resend

Email delivery

Transactional email delivery for scheduled reports and operational messages.

Business email addresses, message metadata, and report email payloads.

EU2026-03-26https://resend.com

Stripe

Billing

Subscription billing and payment processing.

Billing contacts, invoice data, tax metadata, and payment-related business records.

Global2026-03-26https://stripe.com

Cloudflare

Security and edge

DNS, proxying, TLS termination, bot protection, and edge security services.

IP addresses, request metadata, security telemetry, and traffic routing data.

Global2026-03-26https://cloudflare.com

Sentry

Error monitoring

Application error monitoring, diagnostics, and alerting.

Diagnostic event data, stack traces, request metadata, and operational telemetry.

Global2026-03-26https://sentry.io

UptimeRobot

Availability monitoring

Availability checks, uptime monitoring, and alerting for service endpoints.

Endpoint metadata, response status information, and infrastructure monitoring data.

Global2026-03-26https://uptimerobot.com

Related documents