Trust6 sub-processors · updated before any change takes effect

Sub-processors.

The third parties Noplag Labs, Inc. engages to operate the service, what each one does, and where it processes data. We update this list before any change takes effect, and you can subscribe to be notified.

PROVIDERPURPOSEDATA PROCESSEDREGION

Hetzner Online GmbHCloud infrastructure: engine compute, Postgres, object storageAccount data, check metadata, fingerprints, document text (within retention)EU — Germany & Finland

Vercel Inc.Web application hosting + edge deliveryIP address, request metadata, sessionGlobal edge · EU prioritized (SCCs)

Cloudflare, Inc.DNS, CDN, DDoS protection, bot mitigationIP address, request headersGlobal edge (SCCs)

Stripe, Inc.Subscription billing + payment processingBilling contact, customer + payment-method referencesUS + EU (EU-US DPF, SCCs)

ResendTransactional + account email deliveryName, email address, message contentsUS (SCCs)

SentryError + performance monitoringDiagnostic events, scrubbed of document contentUS / EU region (SCCs)

Authentication, usage metering, and the detection engine run on Noplag's own EU infrastructure and are not third-party sub-processors. Self-hosted deployments process submissions entirely inside your network and use none of the above for that processing.

Get notice of changesWe tell you before a new sub-processor starts processing.

Controllers and DPA signatories get advance notice of any addition or change so they can object. Email privacy@noplag.com with the subject “sub-processor updates” to subscribe, or watch this page — the date above always reflects the current list.