Trust Center
Sub-processors
GiesenCloud uses the third-party services listed below to deliver our service. This list is published in fulfilment of our obligations under Article 28(2) of the GDPR.
We will notify customers at least 30 days in advance of adding, removing, or replacing any sub-processor. This list is incorporated into our Data Processing Agreement as its sub-processor annex.
Read the DPA
| Service | Purpose | Data sent | Location |
|---|---|---|---|
| Stripe Payments Europe Ltd. | Payments, subscriptions, invoicing | Billing name, address, email, VAT ID, payment-method tokens | Ireland (EU) |
| HubSpot, Inc. | CRM, support tickets, knowledge base | Contact name, email, phone, company, ticket content, lifecycle stage | United States (SCCs) |
| Amazon Web Services (S3) | Object storage | File uploads, generated PDFs, encrypted OAuth tokens | TBC — EU region preferred |
| Exact Online B.V. | Accounting / ERP sync | Customer billing data, invoices, sales orders | Netherlands (EU) |
| Shopify International Ltd. | Spare-parts storefront | Customer name, shipping address, order line items | Ireland (EU) |
| Sentry / Functional Software, Inc. | Error tracking & performance monitoring | Stack traces, request & query traces, user ID, team ID, truncated IP (PII headers redacted) | TBC — EU DSN preferred |
| Google Maps Platform | Address autocomplete, routing | Customer-entered addresses, geocoordinates | Global |
| Mailgun Technologies, Inc. | Transactional email | Recipient email, name, email content | TBC — EU endpoint preferred |
| Cloudflare, Inc. (Turnstile) | Bot / CAPTCHA protection | IP, browser characteristics, challenge token | Global edge |
| Meilisearch | Search indexing | Indexed model fields (no payment data) | Self-hosted |
| Pusher Ltd. | Real-time fallback (Reverb is primary) | Channel and event payloads in transit | Global |
| Elfsquad B.V. | Product configurator | Configuration choices, lead and quote data | Netherlands (EU) |
| Outsmart B.V. | Field service / installer dispatch | Site addresses, contact info | Netherlands (EU) |
| myGiesen / Giesen Coffee Roasters B.V. | SSO and user lookup | Email, user identifier | Netherlands (EU) |
| POEditor SRL | Translation management (dev only — no customer data) | Source strings only | European Union (Romania) |
| European Commission (VIES) | EU VAT-number validation | VAT number, country code | European Union |
International transfers:
Transfers outside the EEA rely on Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and, where applicable, EU-US Data Privacy Framework certifications.
Self-hosted (not sub-processors):
PostgreSQL, Redis, Laravel Horizon, Laravel Reverb run inside our infrastructure.