Sub-processors
Last updated: June 5, 2026
To provide our service, Vantacron (Simon Kjellner EF) engages the third-party sub-processors listed below. We have, or are putting in place, GDPR Article 28 data-processing terms with each. Transfers outside the EEA rely on the EU–US Data Privacy Framework where the recipient is certified, and on EU Standard Contractual Clauses (SCCs) with supplementary safeguards otherwise. See our Privacy Policy and DPA.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner | Hosting, database and file storage (self-hosted MinIO) | Germany (EU) | N/A (EU) |
| Stripe | Payment processing | US | EU–US DPF |
| Whop | Alternative payment processing | US | SCCs |
| Search Console/Analytics integrations, analytics, ads, AI (Gemini), PageSpeed | US | EU–US DPF | |
| Meta | Advertising measurement (Pixel + Conversions API) — consent-gated | US | EU–US DPF |
| OpenAI | AI action plans, chat, citation analysis, outreach personalization | US | SCCs |
| Anthropic | AI content and analysis | US | SCCs |
| Mistral AI | AI citation analysis | France (EU) | N/A (EU) |
| Resend | Transactional and marketing email delivery | US | SCCs |
| Cloudflare | Bot/spam protection (Turnstile) and network/CDN | US/global | EU–US DPF |
| DataForSEO | SEO, backlink and keyword data | US | SCCs |
| Apollo.io | B2B prospect sourcing for cold outreach | US | SCCs |
| Instantly.ai | Cold-outreach email delivery | US | SCCs |
We will give business customers advance notice of new sub-processors so they can object, as set out in our Data Processing Agreement. To be notified of changes, email [email protected].