Legal
Sub-processors
Every third party that processes customer data on our behalf, what they do, and where they do it.
Effective date: 5 September 2026
01What this list is
A sub-processor is a third party we use to deliver the service that may process customer personal data in doing so. This page lists every one of them.
Each sub-processor is bound by a written agreement that limits them to processing data on our instructions, requires appropriate security measures, and passes through the obligations we owe you.
02Current sub-processors
We do not use sub-processors for advertising, profiling or data enrichment, and we do not share customer data with anyone not on this list except where the law compels it.
- Hetzner Online GmbH
- Compute and storage for the platform and customer microVMs · Processing location: Germany and Finland (EU)
- Oracle Cloud Infrastructure (Oracle Corporation)
- Compute and storage for the platform and customer microVMs · Processing location: The region you deploy to; see the region list in your dashboard
- Stripe, Inc.
- Subscription billing and payment processing · Processing location: United States and Ireland
- Resend, Inc.
- Transactional account and system email · Processing location: United States
- Vercel Inc.
- Hosting and content delivery for this marketing site · Processing location: United States, with edge delivery worldwide
03Changes to the list
We will update this page before a new sub-processor begins processing customer data. Customers on a plan with a data processing agreement in place will also be notified by email at least 30 days in advance.
If you object to a new sub-processor on reasonable data protection grounds, contact us within that notice period and we will work with you to find an alternative. If none exists, you may terminate the affected part of the service.
04Getting notified
To be added to the notification list, write to privacy@smolclouds.com from the email address on your account.
Questions about this document: legal@smolclouds.com
Security reports go to our security page.