Trust
Subprocessors
A subprocessor is a third party that processes customer data on our behalf. We keep this list short on purpose. We notify account owners by email at least 30 days before adding a new subprocessor.
Active subprocessors
| Vendor | Purpose | Data handled | Location |
|---|---|---|---|
| Hetzner Online GmbH Privacy |
Application hosting, database, backups | All customer event data, account data, application logs | Germany (EU) |
| Stripe Payments Europe, Ltd. Privacy · DPA |
Subscription billing, payment processing, tax calculation | Billing email, VAT ID (if provided), card metadata (last 4, brand, country) — we never see full card numbers | Ireland (EU), US (with SCCs) |
| Resend (Resend Inc.) Privacy |
Transactional email (signup, password reset, billing receipts, security notices) | Email address, email body content | US (with SCCs) |
| Anthropic, PBC Privacy |
AI-generated action explanations and chat answers (when enabled and routed to Anthropic) | Already-redacted structured event data for the actions being explained. Anthropic does not train models on inference inputs. | US (with SCCs) |
| OpenAI, L.L.C. Privacy |
AI-generated action explanations and chat answers (when enabled and routed to OpenAI) | Already-redacted structured event data for the actions being explained. OpenAI does not train models on API inputs. | US (with SCCs) |
| Google LLC — Analytics 4 Privacy |
Aggregate usage analytics for the marketing site (ezlogs.io). Only loaded with cookie consent. | IP address (anonymized), browser type, pages visited. No EZLogs account data, no customer event data. | US (with SCCs) |
Note: the only subprocessor that touches the bulk of your customer event data is Hetzner (hosting), in the EU. Anthropic and OpenAI receive only the small, already-redacted event payloads needed to generate the specific explanations you (or your users) requested.
Changes
We keep the subprocessor list short by design. If we add or replace a subprocessor that processes material customer data, we will email the account owner at least 30 days before the change takes effect, so you have time to object or terminate per Section 13 of our Terms and Section 5 of our DPA.
Questions
Procurement or security teams: contact hello@ezlogs.io for the vendor-specific DPAs we have in place with each subprocessor above.
← Back to home