Third parties that process customer data on behalf of Eurobase OÜ (Ahtri 12, Tallinn 15551, Estonia, registry code 17557586). This is the list referenced in Section 7 and Annex 3 of the Data Processing Agreement. It is rendered live from the platform's sub-processor registry — the same source that produces every project's Article 30 report — and we give at least 30 days' notice before adding or replacing an entry. Providers marked when enabled are only engaged for a project once you switch on the corresponding feature; your project's Compliance tab shows exactly which of these apply to you.
| Sub-processor | Country | Service & purpose | Transfer basis | Certifications | Since |
|---|---|---|---|---|---|
OnlineCity ApS GatewayAPI EU jurisdiction | Denmark | Transactional SMS Delivers SMS OTP verification codes for phone-based authentication Data: phone_number | EU internal (no third-country transfer) | ISO 27001 | 2026-04-14 |
Inc. GitHub Inc. (Microsoft) US parent · CLOUD Act reach | United States | oauth_github OAuth identity verification (sign-in only) Data: email_addresses, username | EU-US Data Privacy Framework | SOC 2 | 2026-04-03 |
LLC Google LLC US parent · CLOUD Act reach | United States | oauth_google OAuth identity verification (sign-in only) Data: email_addresses, display_name | EU-US Data Privacy Framework | ISO 27001, SOC 2 | 2026-04-03 |
B.V. (Besloten Vennootschap) Mollie B.V. EU jurisdiction | Netherlands | billing Payment processing and subscription management Data: email_addresses, payment_data, billing_addresses | None — EU only | PCI DSS Level 1 | 2026-04-03 |
SAS (Société par Actions Simplifiée) Scaleway SAS EU jurisdiction | France | cache Managed Redis for rate limiting and real-time Data: session_data, rate_limit_counters | None — EU only | ISO 27001 | 2026-04-03 |
compute Kubernetes compute (Kapsule) Data: application_data, request_logs, ip_addresses | None — EU only | ISO 27001, HDS, SecNumCloud | 2026-04-03 | ||
database Managed PostgreSQL database hosting Data: application_data, user_credentials, email_addresses | None — EU only | ISO 27001, HDS, SecNumCloud | 2026-04-03 | ||
email Transactional email delivery (TEM) Data: email_addresses, email_content | None — EU only | ISO 27001 | 2026-04-03 | ||
storage S3-compatible object storage Data: files, documents, media | None — EU only | ISO 27001, HDS | 2026-04-03 |
Machine-readable copy: GET /platform/public/sub-processors on the API.
Questions about this list? Contact dpo@eurobase.app.