Sub-processors

_Last updated: 2026-05-16_

Integrora engages the following sub-processors to help operate the platform. Each is contractually bound to provide a level of data protection consistent with the Data Processing Addendum.

Infrastructure

| Sub-processor | Purpose | Location | | --- | --- | --- | | Hetzner Online GmbH | Application hosting + primary database | Falkenstein, Germany | | MinIO (self-hosted on Hetzner) | Object storage for uploaded documents | Falkenstein, Germany |

Communication

| Sub-processor | Purpose | Location | | --- | --- | --- | | Resend, Inc. | Outbound transactional email delivery | EU (Frankfurt) | | Cloudflare, Inc. | DNS, CDN, DDoS protection | Global edge; data residency EU |

AI

| Sub-processor | Purpose | Location | | --- | --- | --- | | Google LLC (Vertex AI / Gemini) | Document parsing (passports, certificates, receipts, invoices), translation | EU (multi-region) under SCC |

Optional integrations (opt-in per tenant)

| Sub-processor | Purpose | Location | | --- | --- | --- | | Telegram Messenger Inc. | Telegram bot for supplier/worker notifications | Global; data in transit only | | Tracksolid | Vehicle GPS tracking | EU | | E100 | Fuel card transaction sync | EU | | Eurowag | Fuel card transaction sync | EU |

How we notify of changes

Per the Data Processing Addendum, we publish proposed sub-processor changes here at least 30 days before they take effect and email the platform administrator on the affected tenant. You may object to a new sub-processor in writing within 30 days of the notice; if we cannot accommodate your objection, you may terminate the affected portion of the service.

International transfers

Where a sub-processor is established outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (2021/914/EU) and supplementary safeguards (encryption in transit and at rest, access logging, role-based access control).

Contact

Subprocessor questions or objections: support@integrora.com