Sub-processors
Last updated: 2026-06-15
We use the following sub-processors to run Couac. We'll announce changes here at least 30 days before they take effect.
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| PulseHeberg | Hosting of the application server, Postgres database, Redis (rate limiting) and encrypted backups | France (Toulon) | DPA, French sovereign hosting |
| Cloudflare | DNS, CDN proxy, Turnstile captcha and R2 object storage (screenshots and attachments) | EU + global edge | DPA + SCCs |
| Amazon SES | Transactional email delivery (magic link, notifications) | France (eu-west-3 region, Paris), AWS group (United States) | DPA, Standard Contractual Clauses (SCCs), Data Privacy Framework |
| Stripe | Payment processing and subscription billing | United States / Ireland (Stripe Payments Europe) | Standard Contractual Clauses, PCI-DSS Level 1 certified |