Sub Processors List
Last updated: October 5, 2026
| # | Sub-Processor Name | Region/Country of Processing | Address / Registered Office/Contact | Data Subject | Categories of Personal Data Processed | Purpose | Safeguards for Third Country Transfers (if applicable) |
|---|---|---|---|---|---|---|---|
| 1 | Amazon Web Services | Ireland | 419 Terry Avenue North, Seattle, WA,98109-5210 - contact | Controller’s end users, Users of Pandectes apps (merchants) | Controller’s end users’ IP address (masked, with only the last segment redacted), Geolocation based on IP, User Agent, Consent ID, Consent date & time, Consent Type, Consent Preference; Users of Pandectes apps (merchants): Store details | Cloud Service provider and Data Storage | Not required as Ireland is a part of the EEA |
| 2 | Cloudflare Inc. | Global | 101 Townsend St., San Francisco, California, 94107, USA - contact | Users of Pandectes apps (merchants) | IP address | DNS services, Captcha Service, CDN provider | Standard Contractual Clauses (SCC) and an EU adequacy decision (certification) |
| 3 | Crisp IM SAS | France | 2 Boulevard de Launay 44100 Nantes France - contact | Users of Pandectes apps (merchants) | Users of Pandectes apps (merchants) (name, email); chat transcript content; device/technical metadata (e.g., IP, user agent) as needed for service. | Customer support chat (live chat widget, inbox) | Not required as France is a part of the EEA |
| 4 | Heroku (Salesforce, Inc.) | Europe | Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA - contact | Users of Pandectes apps (merchants) | Application runtime data only. No persistent storage of customer personal data. | Application hosting & runtime infrastructure | Not required as it uses Europe region |
| 5 | Peaberry Software, Inc. (customer.io) | Europe | 9450 SW Gemini Dr., Suite 43920, Beaverton, Oregon 97008-7105, USA - contact | Users of Pandectes apps (merchants) | Merchant email address, store domain and app events | Onboarding emails to merchants | Hosted in the EU region (Belgium). Standard Contractual Clauses (SCC) cover any access from outside the EEA |
| 6 | Sendinblue SAS (Brevo) | EU (France, Germany, Belgium) | 17 rue Salneuve, 75017 Paris, France - contact | Users of Pandectes apps (merchants), marketing email subscribers | Email address, name, company and store domain; email engagement (delivery, opens, clicks) | Marketing emails | Not required as all data is hosted in the EU (France, Germany and Belgium) |