Sub-processors: who helps us run Adea.
These companies handle data on Adea's behalf. Each is bound by the same data protection duties as Adea. We give customers 30 days' notice before we add or replace one.
Adea is provided by Marcus Wilstrup, Rua da Fonte 85 B, Capride, 2785-371 São Domingos de Rana, Portugal. VAT no. PT310292522.
Updated 6 October 2026
Hetzner Online GmbH
- What it does
- The servers Adea runs on: the application, its databases, the copies of connected data and code, and files
- Where
- EU (Germany)
- Basis for transfer
- No transfer outside the EU
Cloudflare, Inc.
- What it does
- The network and encrypted connection to Adea. Encrypted backups of Adea's databases (R2, stored in the EU). Reading code in a short-lived, isolated sandbox. Turning reports and dashboards into PDF files (Browser Rendering). Speech to text and text to speech when a person uses their voice (Workers AI)
- Where
- EU and USA. Backups are stored only in the EU. The sandbox, PDF files and speech run on Cloudflare's global network, not necessarily in the EU, and nothing is kept there after the job
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Anthropic PBC
- What it does
- The AI model (Claude) that understands questions, writes queries, reads code and screenshots and writes answers. Anthropic does not use the data to train its models
- Where
- USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Resend (Plus Five Five, Inc.)
- What it does
- Sending email (sign-in links, notifications, reports and briefs) and receiving files that a company's approved senders mail to Adea
- Where
- USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Stripe Payments Europe, Ltd.
- What it does
- Payments, invoices, receipts and VAT. Only Stripe handles card details
- Where
- Ireland and USA
- Basis for transfer
- EU Standard Contractual Clauses
Functional Software, Inc. (Sentry)
- What it does
- Error monitoring: technical error reports from Adea, without the content of your data, code, questions or answers
- Where
- EU (Germany)
- Basis for transfer
- Data is stored in the EU. Any access from the USA relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Twilio Inc.
- What it does
- Text messages and phone calls about urgent findings, only to people who have added their phone number and turned this on
- Where
- USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Google Ireland Limited
- What it does
- Sign-in with Google, and reading Google Sheets, BigQuery, Search Console and Google Ads, only when a person signs in with Google or the customer connects one of them
- Where
- Ireland and USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Microsoft Ireland Operations Ltd.
- What it does
- Sign-in with Microsoft, and questions and answers in Microsoft Teams, only when a person signs in with Microsoft or the customer connects Teams
- Where
- Ireland and USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
Slack Technologies, LLC
- What it does
- Questions, answers and notifications in Slack, only when the customer connects Slack
- Where
- USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses
GitHub, Inc.
- What it does
- Read access to the customer's code through the GitHub App, only when the customer connects GitHub
- Where
- USA
- Basis for transfer
- EU-US Data Privacy Framework and the EU Standard Contractual Clauses