Our third-party sub-processors
Last updated: 11 September 2026
|
Name of processor
|
Reason
|
Country
|
Legal grounds for transfer
|
Data processing terms
|
Categories of personal data that may be processed
|
Which service
|
|---|---|---|---|---|---|---|
|
Scaleway
|
Hosting for servers, database and backups.
|
France
|
Not applicable (EEA)
|
User account information (E-mail, username, name), IP addresses, access logs, information which the Account Holder collects using the system.
|
The App
|
|
|
Hetzner Online GmbH
|
Disaster recovery and standby hosting for database and user-uploaded content.
|
Finland (Helsinki)
|
Not applicable (EEA)
|
User account information (E-mail, username, name), IP addresses, access logs, customer-created content and participant responses, user-uploaded images and associated metadata.
|
The App
|
|
|
Scaleway
|
Server hosting
|
France
|
Not applicable (EEA)
|
IP addresses, access logs
|
The Landing Page
|
|
|
DigitalOcean, LLC
|
Server hosting
|
United States
|
EU-U.S. Data Privacy Framework; SCCs as fallback
|
IP addresses, access logs
|
The Landing Page
|
|
|
Scaleway
|
Stores user uploaded images
|
France
|
Not applicable (EEA)
|
User-uploaded images and associated metadata
|
The App
|
|
|
Cloudflare, Inc.
|
Content Delivery Network, DDoS protection, DNS, bot protection, and Turnstile protection for website forms
|
United States
|
EU-U.S. Data Privacy Framework; SCCs as fallback
|
IP address, browser/device information, request metadata, and interaction/security signals
|
The Landing Page /
The App
|
|
|
Google Cloud EMEA Limited
|
Email provider and video chat provider for Diggle/Specifique employees.
|
Ireland (with international processing)
|
Not applicable for EEA transfer; DPF/SCCs for restricted onward transfers
|
Employee names and email addresses; email content and attachments; meeting participant information and audio/video content; customer information included in communications.
|
N/A
|
|
|
Scaleway
|
Sending transactional emails
|
France
|
Not applicable (EEA)
|
Email, name, username
|
The App
|
|
|
Stripe Payments Europe, Limited
|
Subscription payment
|
Ireland (with international processing)
|
Not applicable for EEA transfer; DPF/SCCs for restricted onward transfers
|
Payment information, email, name, username
|
The App
|
|
|
Slack Technologies Limited
|
Internal communication
|
Ireland (with US/international processing)
|
Not applicable for EEA transfer; DPF/SCCs for restricted onward transfers
|
Employee names, email addresses and profile information; messages, files and interaction metadata
|
N/A
|
|
|
Scaleway
|
Generative AI hosting and processing
|
France
|
Not applicable (EEA)
|
AI prompts, Diggle content, participant responses and generated output
|
The App
|
|
|
Sendinblue SAS (Brevo)
|
Marketing and contact management
|
France
|
Not applicable (EEA)
|
Email, name, account status, plan and activity
|
The App / The Landing Page
|
|
|
Google Cloud EMEA Limited
|
Dynamic interface translation
|
Ireland (with international processing)
|
Not applicable for EEA transfer; DPF/SCCs for restricted onward transfers
|
Text submitted for translation and associated request metadata
|
The App
|
|
|
CookieYes Limited
|
Cookie consent management
|
United Kingdom
|
EU adequacy decision
|
IP address, geolocation based on IP, cookie/consent information and request metadata
|
The Landing Page
|
|
|
Google Cloud EMEA Limited
|
reCAPTCHA login security and abuse prevention
|
Ireland (with international processing)
|
Not applicable for EEA transfer; DPF/SCCs for restricted onward transfers
|
IP address, browser/device information, interaction and security/risk signals
|
The App
|