Legal
Subprocessors
These companies process personal data on our behalf. We announce changes here and by e-mail at least 30 days in advance.
Current subprocessors
| Company | Purpose | Location | Data |
|---|---|---|---|
| Hetzner Online GmbH | Servers and data centers for the control plane and databases | Germany; other Hetzner regions (Finland, USA, Singapore) only for projects you create there | Customer Data, account data |
| Cloudflare, Inc. | Protection and delivery of the stitchdb.com website, dashboard and platform API; DNS for stitchdb.com; forwarding of e-mail sent to @stitchdb.com addresses | Global network; USA (EU-U.S. DPF, SCCs) | IP addresses, request metadata, account data in transit |
| Resend, Inc. | Sending platform e-mails and, unless you configure your own SMTP, your projects' authentication e-mails | USA (SCCs) | E-mail addresses, e-mail content |
| Stripe Payments Europe, Ltd. (and Stripe, Inc.) | Payments, invoices, tax calculation | Ireland; USA (EU-U.S. DPF, SCCs) | Billing contact and payment data |
| Anthropic, PBC | The optional AI assistant, only when you use it | USA (SCCs) | Your questions and the context sent with them |
| Telegram (operator notifications) | Alerts to the StitchDB operator about incidents, support tickets and abuse | Telegram FZ-LLC, UAE / global (SCCs) | Account e-mail addresses and project identifiers in alerts |
If you configure your own e-mail provider (SMTP) for a project, or connect your own storage bucket, those providers are chosen by you and are not our subprocessors. Sign-in with GitHub or Google is offered at your choice; those companies act as independent controllers for that sign-in.
Changes
Last change: October 19, 2026 (first publication). To object to a new subprocessor, write to [email protected].