Subprocessors

Active processors

Only providers reachable by the released production configuration are active processors. Atlastra reviews contracts, processing location, retention, deletion support, access controls, and transfer safeguards before activation.

• OVHcloud — private VPS, database, and encrypted backend storage; encrypted product data and operational metadata are hosted in the selected European environment.
• Cloudflare — authoritative DNS, Tunnel, content delivery, and network protection; processes network request metadata under the released zone and logging configuration.
• Amplitude — pseudonymous product analytics; receives only the closed allowlisted event and property set, honors the in-app opt-out, and is included in export and deletion propagation.

Selected but not active

The following services are selected for implementation but do not receive production personal data until their account configuration, DPA, region, retention, deletion, and security evidence is complete. They are shown here so the planned boundary is transparent without falsely calling them active processors.

• Resend — selected for transactional account recovery and report-delivery e-mail; activation evidence is pending.
• Cloudflare R2 — selected for encrypted private report/export objects and content-free deletion restore fences; bucket lifecycle and activation evidence are pending.

Disabled integrations

Production billing, push delivery, linked-account identity, and AI workloads remain disabled until their exact provider configuration and release evidence is approved. A provider present only in code or a test harness is not listed as if it receives data. Before any of these features is enabled, this notice and the Privacy Policy will name every active processor and applicable transfer mechanism.

Local data and software suppliers

GeoNames and MaxMind databases run locally and receive no user search or IP query. Natural Earth data and MapLibre software are bundled or local. They are data/software licensors recorded in Licenses and Notices, not hosted subprocessors. Apple and Google determine their own processing when a user interacts directly with their stores or identity services.

Changes and questions

This page is updated before a new processor receives production personal data. Material changes follow the in-app legal notice process. Questions or objections may be sent to support@ankervik.com.