Legal
Sub-processors
These are the companies that process data on our behalf so that the Service can run. We vet each one before it starts, bind it to data protection obligations no less protective than our own, and stay liable to you for what it does.
Platform and delivery
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Servers, databases, file storage and backups of the Service | All service data, including Customer Content | Germany |
| Cloudflare, Inc. | DNS, delivery and protection of the website and the Service, bot check at sign-up and login, forwarding of email to our addresses, storage of encrypted backups | Request metadata including IP address, emails to our addresses, encrypted backups | Global network; backups in the EU |
Email and monitoring
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Brevo (Sendinblue SAS) | Account, billing and system email | Email address, message content | EU |
| Functional Software, Inc. (Sentry) | Error reports | Technical context of failed requests | EU (Frankfurt, Germany) |
Payments
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Sold through Link, LLC (Link, a Stripe company) | Merchant of record: checkout, invoicing, tax, refunds and chargebacks. Link is your seller, not only our processor — see the Terms, section 4 | Billing contact, purchase and tax data. We never receive card numbers | United States and EU |
How we announce changes
Before a new sub-processor starts processing Customer Personal Data, we publish it here and notify subscribers at least 30 days in advance. To be notified, write to privacy@dynamicdocumentapi.com with “subscribe sub-processors” in the subject. You may object on reasonable data protection grounds; section 7 of the DPA says what happens then.
Not sub-processors
Providers that never touch Customer Personal Data are not listed here: for example the domain registrar, our own accounting software, or tools used purely internally. Changes to those do not trigger a notice.
Change history
| Version | Date | Change |
|---|---|---|
| 0.1 | 23 September 2026 | First draft from infrastructure planning, pending confirmation of the actual stack |
| 1.0 | 4 October 2026 | Matched to the actual stack: Hetzner instead of Amazon Web Services, Brevo and Sentry named, Link as seller; product analytics and support desk removed because we use neither |