Sub-processors
Last updated: 25 July 2026
Third parties that process personal data on our behalf, and the safeguards that apply to each.
Current sub-processors
| Provider | Purpose | Data handled | Location |
|---|---|---|---|
| Stripe | Subscription payments, invoicing, and fraud prevention | Email address, billing details, and payment card data (collected by Stripe directly - FeatherVault never sees card numbers) | United States / Ireland |
| Hetzner Online GmbH | Hosting for the application, database, authentication service, and job runners | All account and run data stored by FeatherVault, at rest on Hetzner infrastructure | Germany (EU) |
Your storage provider is not on this list
FeatherVault writes backups directly to a storage bucket that you own and configure. We never hold a copy. Your storage provider is therefore not our sub-processor — you are its controller, and your agreement with them governs that data. This is also why the list above is short: the bulk of the data FeatherVault touches never rests on our infrastructure at all.
Safeguards
- Stripe — EU Standard Contractual Clauses; Stripe's own DPA
- Hetzner Online GmbH — Processing within the EEA; Hetzner data-processing agreement
Changes
We will update this page before adding a new sub-processor. Customers on a Commercial plan with a signed data processing agreement can ask to be notified in advance — email privacy@feathervault.io to be added to that list, or to request a copy of our data processing terms.