Skip to content
SmolClouds

Legal

Sub-processors

Every third party that processes customer data on our behalf, what they do, and where they do it.

Effective date: 5 September 2026

01What this list is

A sub-processor is a third party we use to deliver the service that may process customer personal data in doing so. This page lists every one of them.

Each sub-processor is bound by a written agreement that limits them to processing data on our instructions, requires appropriate security measures, and passes through the obligations we owe you.

02Current sub-processors

We do not use sub-processors for advertising, profiling or data enrichment, and we do not share customer data with anyone not on this list except where the law compels it.

Hetzner Online GmbH
Compute and storage for the platform and customer microVMs · Processing location: Germany and Finland (EU)
Oracle Cloud Infrastructure (Oracle Corporation)
Compute and storage for the platform and customer microVMs · Processing location: The region you deploy to; see the region list in your dashboard
Stripe, Inc.
Subscription billing and payment processing · Processing location: United States and Ireland
Resend, Inc.
Transactional account and system email · Processing location: United States
Vercel Inc.
Hosting and content delivery for this marketing site · Processing location: United States, with edge delivery worldwide

03Changes to the list

We will update this page before a new sub-processor begins processing customer data. Customers on a plan with a data processing agreement in place will also be notified by email at least 30 days in advance.

If you object to a new sub-processor on reasonable data protection grounds, contact us within that notice period and we will work with you to find an alternative. If none exists, you may terminate the affected part of the service.

04Getting notified

To be added to the notification list, write to privacy@smolclouds.com from the email address on your account.

Questions about this document: legal@smolclouds.com

Security reports go to our security page.