Sub-Processors
Last reviewed: October 23, 2026.
FeedbackPulse uses third-party service providers and sub-processors to deliver, secure, support, and improve the platform. This list is maintained in accordance with our Privacy Policy, Data Processing Agreement, and Security page.
Current Sub-Processors
| Sub-Processor | Function | Location |
|---|---|---|
| Hetzner | Primary production infrastructure hosting | EU by default |
| Cloudflare | CDN, DNS, DDoS protection, WAF, and R2 backup storage | Global edge network; R2 database backups use EU jurisdiction |
| Stripe | Payment processing | United States/global |
| Mailtrap | Transactional email and survey invitations | United States |
| Loops | Marketing and onboarding email automation | United States |
| Sentry | Error monitoring and application diagnostics | United States |
| OpenAI | Fallback AI summaries via commercial API when enabled | United States |
| Anthropic | Primary AI summaries and topic classification via commercial API when enabled | United States |
| OAuth authentication provider when used | Global | |
| Slack | Optional Slack integration and operational notifications when used | United States/global |
| Attio | CRM and customer-success records | United States/global |
| PostHog | Product analytics and masked session replay | European Union |
| Crisp IM SAS (France) | Customer support chat | Data stored and processed in the Netherlands and Germany (DigitalOcean); encrypted backups in Ireland (AWS). Relay servers in the United States, United Kingdom, and Singapore hold connection logs only. |
| Microsoft Clarity | Marketing-site and in-app product analytics; in-app text is masked and analytics is disabled on employee survey pages | United States |
Planned Sub-Processors
| Sub-Processor | Planned Function | Location |
|---|---|---|
| Microsoft | Microsoft sign-in and optional Microsoft Teams directory and member import; disabled pending full integration | Processing location to be confirmed before use |
Listing a planned provider does not replace any advance notice and objection process required by the applicable Data Processing Agreement.
Infrastructure Residency Boundary
FeedbackPulse production hosting defaults to Hetzner EU Data Centers. The live production application, database, required uploaded and generated files, and production database backups are on EU infrastructure.
Cloudflare edge services, transactional email, AI summary providers, error monitoring, CRM/support tooling, identity providers, payments, analytics, and optional Slack workflows are separate processors. They are outside the EU infrastructure-hosting claim unless a customer-specific processor configuration, retention decision, or feature disablement is agreed and documented.
Changes to Sub-Processors
We will update this page when sub-processors are added or removed. If you have a Data Processing Agreement with us, we will notify you of changes in accordance with that agreement.
Questions
For questions about our sub-processors or data processing practices, contact [email protected].