Subprocessors
Last updated: 20 June 2026
We use a small number of vetted third parties to run PageDiff. This list is kept current; when it changes, we notify customers and give an opportunity to object.
| Subprocessor | Function | Data | Location | Transfer basis |
|---|---|---|---|---|
| Hetzner Online GmbH | Application & database hosting (servers, PostgreSQL) | All service data (primary store) | European Union (Germany / Finland) | In-region — no international transfer |
| Cloudflare, Inc. | Object storage (R2) for screenshots & HTML, DNS/CDN, bot protection, email delivery | Page snapshots & HTML, request metadata, alert emails | United States (with EU storage options) | DPF / SCCs — R2 storage pinned to the EU jurisdiction |
| Lemon Squeezy, LLC | Payment processing as Merchant of Record (PCI-compliant) | Name, email, billing & tax details | United States | Merchant of Record (own privacy policy) + DPF / SCCs |
| Anthropic, PBC | AI analysis & summarization of detected changes (current AI subprocessor) | Monitored page content sent for summarization | United States | DPF / SCCs + Data Processing Agreement |
Our product analytics run on Umami, which we self-host on our own EU infrastructure. Because no data is shared with a third party, Umami is not a subprocessor. It is cookieless and collects only aggregate, non-identifying usage data.
Your primary data stays in the European Union. Only payments and AI analysis are processed in the United States, under the EU–US Data Privacy Framework and/or Standard Contractual Clauses. For more on how we handle data, see our Privacy Policy and Security page.