Back to home
Legal
Subprocessor list
The third parties we rely on to run SterkChef, what each one does and where your data sits.
SterkChef engages the subprocessors below to provide its service. This list forms Annex III of our Data Processing Agreement (DPA). We notify customers before adding or replacing a subprocessor so they can object.
| Subprocessor | Purpose | Data processed | Location | Status |
|---|---|---|---|---|
| Hetzner Online GmbH | Application hosting & database | All tenant data (hosting) | Germany / Finland (EU) | Active |
| Hetzner Object Storage | Backups & audit cold-storage | Backups, archived audit logs | Germany / Finland (EU) | Active |
| Amazon Web Services (SES) | Transactional & notification email | Recipient email address, message content | Frankfurt, EU (eu-central-1) | Active |
| Sentry | Error monitoring | Technical error context (PII-minimised) | EU region | Being enabled |
| Bancontact / Payconiq | Payment processing | Payment metadata (no card number stored) | Belgium / EU | Partially live |
| Twilio | SMS delivery (optional) | Recipient phone number | EU / US | Optional |
| Sodexo, Edenred, Monizze | Meal-voucher processing (BE) | Voucher transaction metadata | Belgium | Planned |
- “Active” means the integration handles live production traffic today.
- “Partially live”, “Being enabled” and “Planned” mark integrations that are not yet processing live customer data, listed here for transparency, not yet engaged.
- Card numbers (PAN) are never stored: only the last four digits and a gateway reference are kept (PCI-DSS).
We notify customers of any change to this list before the new subprocessor starts processing data. Questions: privacy@sterklight.be.