Sub-processors
Last updated 3 October 2026.
Clouden uses the service providers below (“sub-processors”) to process personal data on our behalf. This list is the Subprocessor List referred to in our Data Processing Agreement, and our Privacy Policy refers to it too. Where a sub-processor works for one service only, the purpose says which.
We tell business customers about a new sub-processor by email at least 30 days before it starts processing their customers’ data. If you have a reasonable data protection concern, you can object, as described in section 4.4 of the Data Processing Agreement.
| Sub-processor | Purpose | Location and transfer safeguard |
|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Hosting, databases, file storage, authentication (Amazon Cognito), email delivery (Amazon SES) and backups, for every service. In WebCat, AI name suggestions with Amazon Bedrock. In Tuntikirjaus, the AI assistant with Amazon Bedrock and Amazon Bedrock AgentCore, including its conversation memory | EU: Ireland for hosting and storage, and Ireland, Frankfurt, Paris or Stockholm for Amazon Bedrock. Content delivery through CloudFront edge locations worldwide, request filtering and certificates in the United States, and a backup copy of some WebCat billing records in the United States. Safeguard: EU–US Data Privacy Framework, Standard Contractual Clauses |
| ClouDNS (Bulgaria) | DNS hosting for WebCat DNS zones | EU for the zones we manage, and ClouDNS’s anycast network worldwide, which is how the DNS answers queries everywhere. A DNS zone is published technical information rather than personal data, as described in Schedule 1 of the Data Processing Agreement, so no transfer safeguard arises for it |
| Google Ireland Limited | Website analytics (Google Analytics) and, in WebCat, measurement of advertising conversions (Google Ads), only for visitors who consent to analytics cookies | EU, United States. Safeguard: EU–US Data Privacy Framework, Standard Contractual Clauses |
| Hetzner Online GmbH (Germany) | Servers for Cloudora, our platform for WebCat’s server and hosting features, and the data that customers store on them | EU (Germany or Finland). We use only Hetzner’s EU locations, so no transfer safeguard is needed |
| Printful Inc. (United States) | Producing and shipping WebCat merchandise. It receives the recipient’s name, company, shipping address, email address and phone number | United States, and production facilities inside and outside the EU. Safeguard: Standard Contractual Clauses |
| Slack Technologies, LLC (United States) | Internal notifications about events and errors in our services. These may include a customer’s email address, error details, and, in WebCat, domain search terms and descriptions entered for AI name suggestions | United States. Safeguard: EU–US Data Privacy Framework, Standard Contractual Clauses |
| Stripe Payments Europe, Limited (Ireland) | Payment processing, receipts and subscription billing | EU, United States. Safeguard: EU–US Data Privacy Framework, Standard Contractual Clauses |
| UpCloud Oy (Finland) | Hosting for Cloudora, our platform for WebCat’s server and hosting features. It receives the user identifier and email address of signed-in users, and the data of those features | EU (Helsinki, Finland). No safeguard needed, as processing stays in the EU |
Third Parties That Act on Their Own Behalf
The following parties are not sub-processors. They receive personal data when you use the feature concerned, and they process it as controllers under their own terms and privacy policies:
| Party | When it receives data | Location |
|---|---|---|
| Finnish Transport and Communications Agency Traficom | Registering or managing a .fi domain in WebCat | Finland |
| Enom, LLC (Tucows) | Registering or managing an international domain in WebCat | United States, Canada |
| NameSilo, LLC | Managing an international domain that was registered through it earlier | United States |
| Other domain registries | Registering or managing a domain under their top-level domain | Depends on the domain |
| GitHub, Inc. | Connecting the GitHub integration in Tuntikirjaus | United States |