Subprocessors

Filoxenos uses selected service providers to support the delivery, security and operation of its services. These providers process personal data on our behalf only where necessary to provide the platform and under contractual data protection obligations.

• Vercel Service: Hosting and application infrastructure Data involved: Technical data, account-related data, platform-delivery data Processing location: Frankfurt, Germany (eu-central-1, fra1) Third-country transfer: No, based on current configuration Safeguard: Data Processing Addendum
• Supabase Service: Database, backend infrastructure, storage and backups Data involved: Account data, booking data, integration data, contact data, technical data Processing location: EU region (eu-central-1) Third-country transfer: No, based on current configuration Safeguard: Data Processing Addendum
• Cloudflare Service: DNS and nameserver infrastructure only Data involved: DNS request metadata, technical connection data such as IP addresses Processing location: According to provider configuration Third-country transfer: To be assessed based on provider infrastructure Safeguard: Data processing agreement and applicable transfer safeguards where required
• Netim Service: Domain registration and administration Data involved: Domain/account data, registrant and billing contact data, business contact data Processing location: France / EEA Third-country transfer: Possible depending on registry and domain extension Safeguard: Provider contractual safeguards and applicable transfer safeguards where required
• Netim Service: Email infrastructure and webmail Data involved: Email metadata, sender/recipient data, business communication data, mailbox administration data Processing location: France / EEA Third-country transfer: To be assessed based on actual service routing Safeguard: Provider contractual safeguards and applicable transfer safeguards where required

Filoxenos currently uses Cloudflare only for DNS and nameserver services. No Cloudflare proxy, CDN or web application firewall is enabled. Filoxenos will inform customers of intended additions or replacements of subprocessors in advance where required under the applicable Data Processing Agreement. Customers may object on reasonable data protection grounds within the period set out in the applicable DPA.