Subprocessor List
Third-party providers used by Evernow GmbH to provide docket.
Last updated: July 8, 2026
Subprocessors
"Processing location" is where the data is stored or computed. This is separate from where a provider is legally established: a provider headquartered outside the EEA can still process data on infrastructure located in the EEA, but personal data may still be accessible from, or subject to the laws of, that provider's home jurisdiction. Where a provider is established outside the EEA, the table below states the transfer safeguard we rely on for that provider — see International Data Transfers below.
| Provider | Purpose | Processing Location | Legal Entity & Transfer Safeguard |
|---|---|---|---|
| Fly.io | Application hosting and infrastructure | Frankfurt, Germany, according to current configuration | Fly.io, Inc. (United States). EU-U.S. Data Privacy Framework. |
| Amazon Web Services (S3) | Storage of uploaded files and attachments | Frankfurt, Germany, according to current bucket configuration | Amazon Web Services, Inc. (United States). EU-U.S. Data Privacy Framework and Standard Contractual Clauses. |
| Redis Cloud | Session-related infrastructure, caching, and performance optimization | Frankfurt, Germany, according to current configuration | Redis (United States-headquartered; contracting entity depends on customer domicile). Standard Contractual Clauses. |
| Mistral AI | AI processing and generation of responses for user-initiated AI features | Paris, France, according to current configuration | Mistral AI (France, EU). No international transfer for EU-processed requests. |
| Stripe | Billing, payment processing, subscription administration, fraud prevention | EU / United States / global processing depending on Stripe services and legal role | Stripe Payments Europe, Ltd (Ireland, EU) as EU contracting entity; processing may also involve Stripe, Inc. (United States). EU-U.S. Data Privacy Framework. |
| Postmark | Transactional email delivery | United States / global processing | AC PM LLC / ActiveCampaign (United States). EU-U.S. Data Privacy Framework; DPA with Standard Contractual Clauses available. |
| AppSignal | Monitoring, diagnostics, error tracking, and application logs | EU / Europe according to current configuration and provider terms | AppSignal B.V. ('s-Hertogenbosch, Netherlands, EU). No international transfer. |
International Data Transfers
Several subprocessors are headquartered outside the European Economic Area, even where the specific infrastructure we use is located within the EEA (see table above). Where this applies, we rely on the transfer safeguard indicated for that provider, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, consistent with Section 11 of the Privacy Policy and Section 20 of the Data Processing Agreement.
Subprocessor Changes
We may update this list from time to time.
For material additions or replacements of subprocessors, we will provide notice by publishing an updated list and by email to account administrators. Where reasonably practicable, notice will be provided at least 30 days before the new subprocessor processes Customer Personal Data.
Customers may object on reasonable data protection grounds within the notice period. If the objection cannot be resolved, the customer may terminate the affected service before the new subprocessor is used.
Contact
Questions regarding subprocessors may be sent to: info@godocket.app.