Sub-processors
Last updated November 10, 2026
Last updated: November 10, 2026
Sub-processors
Third parties that may process personal data on our behalf when you use IEMSuite. This is the contractual list referenced by Terms §8.1 and Annex I of the DPA. The AI assistant's language model runs on our own infrastructure and is not a sub-processor.
| Provider | Service | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Oracle Cloud Infrastructure (self-managed via Coolify) | Application, database and cache hosting | All service data | EU | Within EEA |
| Supabase, Inc. | File storage (QC attachments, shipment documents, support attachments) | Uploaded files | EU region (USA company) | Within EEA / SCC |
| Shopify International Ltd. / Shopify Inc. | Store synchronisation (only if you connect Shopify) | Orders, customers, products | Ireland / Canada / USA | Adequacy (Canada) · DPF / SCC |
| Stripe Payments Europe Ltd. / Stripe, Inc. | Payments (when billing launches) | Billing contact, transaction ids | Ireland / USA | DPF / SCC |
| Intuit Inc. (QuickBooks Online) | Accounting sync (optional) | Invoices, payments, customer names | USA | DPF / SCC |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error context, IP | EU data residency / USA | DPF / SCC |
| Resend, Inc. | Transactional e-mail | E-mail address, name, message | USA / EU | SCC |
| Cloudflare, Inc. | DNS, WAF, Turnstile bot protection | IP address, request metadata | Global edge / EU | DPF / SCC |
| Google Ireland Ltd. / Google LLC | Google Analytics 4 (consent only, admin-switchable); Search Console | Cookie identifiers, truncated IP, page views | Ireland / USA | DPF / SCC |
| Grafana Labs | Front-end performance telemetry | Performance metrics, coarse session id | EU | Within EEA |
| Frankfurter / TCMB EVDS | Daily exchange rates | None (public rates) | EU / Türkiye | Not applicable |
Changes and objections
We notify customer administrators by e-mail at least 14 days before a new sub-processor starts processing Customer Personal Data. Objections on reasonable data-protection grounds: [email protected]. If an objection cannot be resolved, the affected subscription may be terminated without penalty.
Transfer safeguards
Transfers to the USA rely on the EU-US Data Privacy Framework where the provider is certified (verified yearly) and otherwise on the 2021 EU Standard Contractual Clauses with a transfer impact assessment. Copies: [email protected].
Questions: [email protected]