Sub-processor List
Version 1.0 · Effective 2026-09-08
This page lists the third-party Sub-processors Closetforge engages to deliver the Service. We notify Customers at least thirty (30) days before adding or replacing a Sub-processor (see DPA Section 8). Customers can subscribe to update notifications by emailing privacy@closetforge.com.
Infrastructure
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | The dedicated server that runs the application, the PostgreSQL database and the MinIO object storage (textures, PDFs, thumbnails, brand assets). All three are self-hosted on that one machine. | Germany (Falkenstein) | Within EEA |
| Coolify Cloud (operating entity to be confirmed) | Deployment control plane; holds administrative access to the server above | EU | Within EEA |
| Amazon Web Services EMEA SARL (Luxembourg) | Off-site backup storage only (Amazon S3): a daily copy of the database, and a copy of stored files (quote PDFs, 3D renders, material textures, brand assets), held so that the loss of the single server above does not lose the data. AWS runs no part of the Service itself and receives no user traffic. | Germany (Frankfurt, eu-central-1) | Within EEA — the data does not leave the EEA. The AWS DPA and EU SCCs (2021/914) are incorporated into the AWS Service Terms by default and would apply if it ever did. |
| Google Cloud EMEA Limited (Ireland) | Rendering compute only (Cloud Run and Compute Engine — the same container image, on whichever of the two can bind the GPU): a short-lived container that draws the animated preview and the still preview images of a WARDROBE DESIGN TEMPLATE — a showroom design published by the woodworker, never a customer's own configuration, never a quote and never a portfolio project. It is handed one URL of the platform's own template-render page and returns a video file or still images. No customer data, no personal data and no database access reach it, and it stores nothing. | Belgium (europe-west1) | Within EEA — the data does not leave the EEA, and no personal data is transferred in any case. The Google Cloud Data Processing Addendum and EU SCCs (2021/914) apply under the Google Cloud Platform terms. |
Monitoring
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Application error monitoring across the API, the Configurator, the admin dashboard and the closetforge.com marketing website — stack traces, request metadata and IP addresses | US company, EU ingest (ingest.de.sentry.io) | EU SCCs (2021/914); DPF as applicable |
Communication
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Twilio Ireland Limited | SMS one-time-password delivery | EU primary, global delivery | EU SCCs (2021/914) for any non-EEA delivery |
| Resend, Inc. | Transactional email (quotes, notifications) | US | EU SCCs (2021/914) |
| Google Ireland Limited | Gmail API for certain outbound email sent from the platform's own mailbox; Google Workspace for internal email and documents | EU contracting entity, global processing | EU SCCs / DPF |
Address lookup and distance
Used to price delivery and to decide which measurement-visit band an address falls in. A consumer's delivery street, postcode and city are sent to these services.
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Nominatim (OpenStreetMap Foundation) | Converts a delivery address into coordinates | EU / UK | Public open-data service; no contract in place — see the note above |
OSRM (router.project-osrm.org) | Driving distance between the workshop and the delivery address | EU-hosted public instance | Public open-source service; no contract in place — see the note above |
These two are the only services that receive a delivery address. No other mapping, geocoding or routing vendor is used, and none is configured as an alternative. If that ever changes, this list is updated and Customers are notified first.
AI
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| OpenAI Ireland Limited | LLM inference for AI chat (GPT-5 family) | EU contracting entity, US processing | EU SCCs (2021/914) Module Three; data not used for training under enterprise terms |
Payments
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe, Limited | Card processing | EU primary, US fraud screening | EU SCCs / DPF; Stripe acts as independent controller for some processing |
Internal operations (process Personal Data only incidentally)
| Sub-processor | Service | Region |
|---|---|---|
| Google Workspace | Email, calendar, documents | EU primary |
| GitHub | Source-code hosting (no production data) | US |
We do not use a helpdesk product; support is a monitored mailbox.
Analytics
| Sub-processor | Service | Region | Transfer mechanism |
|---|---|---|---|
| No analytics vendor is engaged at the date of this version. |
Any web or product analytics vendor we engage is listed in this table, and Customers are notified at least thirty (30) days beforehand under DPA Section 8.
Notes
- Any Sub-processor that processes Personal Data on Closetforge's behalf is bound by a written agreement imposing data-protection obligations no less protective than those in the DPA.
- Sub-processors marked "DPF-certified" appear on the EU–US Data Privacy Framework list; transfers rely on the EU Commission's adequacy decision for the DPF.
- Where transfers fall outside an adequacy decision and DPF coverage, EU SCCs (2021/914) are used, supplemented by encryption in transit and at rest, contractual purpose limitations, and the Sub-processor's own technical and organisational measures.
Last review: 2026-08-29 Next scheduled review: 2027-02-28
To request an updated list or detailed information about any entry, email privacy@closetforge.com.