---
title: "Subprocessors"
description: "The companies Spectate uses to process customer personal data, what they do, which data they get and where they process it."
url: https://spectate.net/legal/subprocessors
last_updated: 2026-10-26
---

# Subprocessors

> The companies Spectate uses to process customer personal data, what they do, which data they get and where they process it.

A subprocessor is a company we use to process personal data on behalf of our customers, so that we can provide Spectate. Each one is bound by a data processing agreement and only gets the data it needs for its task. This list is part of our [Data processing agreement](https://spectate.net/legal/dpa).

## Current subprocessors

| Name | Purpose | Data | Location |
|---|---|---|---|
| [Hetzner Online GmbH](https://www.hetzner.com) | Hosting of the API, databases, dashboard, status pages, file storage, backups and our error tracking | All customer data | Germany |
| [UpCloud Oy](https://upcloud.com) | Servers for our checkers in Amsterdam, New York, Singapore and Sydney | Monitor settings, including credentials needed for the check, and check results | Amsterdam (Netherlands), New York (United States), Singapore, Sydney (Australia) |
| [Lettermint B.V.](https://lettermint.co) | Sending email (alerts, status page updates, account emails) and receiving email (support, email alert sources) | Email addresses, names, email content | European Union |
| [Bird (MessageBird B.V.)](https://bird.com) | Sending SMS messages and making phone calls for alerts and on-call | Phone numbers, alert text | Netherlands |

The checkers in New York, Singapore and Sydney only receive monitors for which the customer chose that region. They send the results back to our servers in Germany and keep no copy.

## Not subprocessors

- **Vatly B.V.** (the Netherlands) sells subscriptions and credit packs as our reseller and merchant of record, and **Mollie B.V.** (the Netherlands) processes the payments for Vatly. They handle billing data as independent controllers under their own privacy policies and receive no data from your monitors, alerts, incidents or status pages.
- **Destinations you choose**, such as Slack, Microsoft Teams, Discord, Telegram, Pushover, Intercom, webhooks to your own URLs, and the email addresses and phone numbers you add. The same goes for tools that send alerts to Spectate (Grafana, Prometheus Alertmanager, Sentry) and the sign-in providers GitHub, Google and Microsoft. You decide to send data there.
- **Infrastructure that stores no customer data**: Cloudflare (DNS), Let's Encrypt (TLS certificates, receives domain names only), GitHub (source code and container images) and Ploi (deploys to our servers).

## Transfers outside the EU

Customer data is stored in Germany. It only leaves the European Economic Area when you choose a checker region outside the EU for a monitor, or send data to a destination outside the EU, such as a chat integration or a phone number in another country. For our checkers outside the EU we rely on the European Commission's Standard Contractual Clauses in UpCloud's data processing agreement, or on an adequacy decision where one exists.

## Changes to this list

We email the owners of every Team at least 30 days before a new subprocessor starts processing their personal data, and update this page. You can object as described in section 7 of the [Data processing agreement](https://spectate.net/legal/dpa).

Questions? Email [privacy@spectate.net](mailto:privacy@spectate.net).