Sub-processors
Plain-language summary: To run 4ShootOps we rely on a small set of trusted third-party providers ("sub-processors") for hosting, payments, email, and encrypted database backups. This page lists them, what each one does, and where it operates. When you connect your own storage (Bring-Your-Own storage), that provider is engaged by you, not by us—so it is not a 4ShootOps sub-processor.
1. Current Sub-processors
The following sub-processors process personal data on behalf of 4ShootOps in order to deliver the Service. This list corresponds to Section 4.1 of our Data Processing Addendum.
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription billing | USA |
| Hetzner | Hosting / compute (application servers, database) | EU (Germany / Finland) |
| Cloudflare | CDN, DNS, security (WAF); encrypted database-backup storage (R2) | Global / EU |
| Backblaze B2 | Encrypted database-backup storage only (not customer media) | EU / USA |
| Brevo (Sendinblue) | Transactional email delivery | EU (France) |
Database backups are encrypted client-side before they leave our servers; the backup-storage providers (Cloudflare R2 and Backblaze B2) hold only encrypted data and cannot read its contents.
2. Bring-Your-Own Storage Is Not a Sub-processor
Where you connect your own object-storage account or bucket ("Connected Storage") to store your uploaded media, that storage provider is engaged by you as the data controller, not by 4ShootOps. You choose the provider and region, you hold the credentials, and that provider's own terms govern the data stored there. Accordingly, such providers are not 4ShootOps sub-processors and are not listed above. See Section 4.3 of the Data Processing Addendum for details.
3. Changes to This List
We provide at least 10 business days' notice before adding or replacing a sub-processor that processes personal data. Notice is given by updating this page (with a revised "Last Updated" date) and, where you have an active subscription, by email to your account's administrative contact. You may object to a new sub-processor on reasonable data-protection grounds as described in Section 4.2 of the Data Processing Addendum.
To receive change notices or request the current list, contact [email protected].