Subprocessor List
This list describes providers SimplNorm uses to provide, secure, support, and lawfully operate the service. Providers may change where needed to operate, secure, or improve SimplNorm.
Providers
Hetzner Online GmbH and Hetzner Finland Oy
- Purpose: hosting frontend, backend, and PDF service.
- Location or region: Helsinki, Finland, EU.
- Transfer notes: Hetzner Online GmbH is the contractual hosting provider and Hetzner Finland Oy operates the data center in the Helsinki region.
Neon
- Purpose: managed PostgreSQL database.
- Location or region: Frankfurt, EU.
- Transfer notes: may use international support or operational processing under its data processing terms.
Cloudflare
- Purpose: DNS, Pages, Workers, KV, R2, Analytics Engine, security, and network infrastructure.
- Location or region: global network; R2 configured for EU storage where enabled.
- Transfer notes: uses contractual and transfer mechanisms, including EU Standard Contractual Clauses where required.
Resend
- Purpose: transactional email, waitlist, and contact records.
- Location or region: primary processing may occur in the United States.
- Transfer notes: uses data processing terms and EU Standard Contractual Clauses for certain ex-EEA transfers.
Sentry (Functional Software, Inc.)
- Purpose: error monitoring, diagnostics, and protection of frontend and backend service stability.
- Location or region: processing may occur in the United States and other countries where the provider operates.
- Transfer notes: uses data processing terms and EU Standard Contractual Clauses for relevant ex-EEA transfers. We limit diagnostic data sent to what is reasonably necessary.
- Purpose: Google sign-in, if selected by the user.
- Location or region: global.
- Transfer notes: used only where the user chooses the related sign-in or feature.
GitHub
- Purpose: GitHub sign-in, if selected by the user.
- Location or region: global.
- Transfer notes: used only where the user chooses the related sign-in or feature.
Stripe
- Purpose: payments, if paid plans are introduced.
- Location or region: global.
- Transfer notes: not active for beta payments as of this list date. The Privacy Policy will be updated before charging begins.
Change Notices
We will notify active users directly by email or in the application of material changes that affect personal data processed on their behalf, where practicable at least 15 days in advance. You may object within that period on reasonable data-protection grounds by contacting info@simplnorm.com. The DPA describes how we handle an objection.
