Legal
Sub-processors
Processors under Art. 28 GDPR that process personal data on behalf of deveca.
The German version is the legally binding text.
This list covers the marketing website (deveca.de) and the GRC application (grc.deveca.app). Contracts under Art. 28 GDPR exist with every provider named. The current version is also in the Trust Center.
| Provider | Purpose | Location | Privacy |
|---|---|---|---|
| Railway Corporation | Runtime of the GRC application (frontend and backend) | USA / EU | Privacy notice |
| Hetzner Online GmbH | Database and object storage for evidence, attachments, and backups | Germany (Nuremberg, Falkenstein) | Privacy notice |
| Vercel Inc. | Hosting of the marketing website | USA / EU (fra1) | Privacy notice |
| Cloudflare Inc. | DNS, CDN, DDoS protection, and WAF | USA / EU | Privacy notice |
| Resend Inc. | Transactional email delivery | USA | Privacy notice |
| Stripe, Inc. (optional) | Payment processing and subscriptions | USA / EU | Privacy notice |
We announce changes on this page. Questions: datenschutz@deveca.org.