Sub-processors
Lees deze pagina in het Nederlands
Service-specific additions are on the sub-processor page of the service concerned.
Last updated: 2026-09-30
| Sub-processor | Purpose | Location of processing | Transfer basis |
|---|---|---|---|
| Cloudflare, Inc. | hosting; storage restricted to EU data centres; request processing at the nearest global edge; DNS; request logs | Storage: European Union. Processing: worldwide edge. Control plane: US | EU standard contractual clauses (Cloudflare DPA) |
| Resend, Inc. (using Amazon Web Services) | transactional email; message logs kept 30 days | AWS eu-west-1 (Ireland) | EU standard contractual clauses (Resend DPA) |
| Stripe Payments Europe, Ltd. | payment processing, invoicing, tax id validation | Ireland; Stripe, Inc. (US) for parts of processing | EU standard contractual clauses (Stripe DPA) |
| Fastmail Pty Ltd | support mailbox (support email only, never product data) | United States (servers), Australia (company) | EU standard contractual clauses (Fastmail DPA); support threads deleted after 12 months |
| OpenRouter, Inc. | passing messages in the chat on virtunet.io to the language model; message content is not stored, only metadata such as token counts | United States | EU standard contractual clauses (OpenRouter DPA) |
| Microsoft Azure (via OpenRouter) | the language model behind the chat on virtunet.io, without storing messages (zero data retention) | European Union | no transfer |
| Google Ireland Ltd. (Google Workspace) | the mailbox info@virtunet.io: contact form messages and forwarded chats on virtunet.io | Google's worldwide data centres | EU standard contractual clauses (Google Workspace DPA) |
Changes are announced by email at least 14 days in advance. Each sub-processor is bound by a written contract imposing data protection obligations equivalent to those in our Data Processing Agreement.