Legal
Sub-processors
Last updated: 8 October 2026 · ezyClients OÜ, Narva mnt 7-652, 10117 Tallinn, Estonia
Ardoca, a service operated by ezyClients OÜ (“ezyClients”, “we”, “us”), uses the sub-processors below to process Customer personal data on behalf of our Customers. This list is Annex 2 to our Data Processing Agreement and is the complete list of sub-processors for Customer personal data.
1. Current sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH (Germany) | Servers and database | Germany (Falkenstein, Nuremberg) |
| Cloudflare, Inc. (USA) | File storage and backups (R2, EU-jurisdiction buckets); DNS; TLS proxy and network protection for Customer subdomains | Stored data in the EU; network traffic passes Cloudflare’s global edge, covered by Cloudflare’s DPA and the EU Standard Contractual Clauses |
| Amazon Web Services EMEA SARL (Luxembourg) | Transactional e-mail (Amazon SES) | Germany (Frankfurt, eu-central-1) |
| PostHog Inc. (EU Cloud) | In the application: product analytics, error tracking and fully masked session replay in the browser, only after cookie consent; server-side error and log telemetry carrying identifiers only (never names, contact details, form answers or file contents), on the basis of legitimate interest | Germany (Frankfurt) |
| Mistral AI SAS (France) | AI document checks and AI help in the workflow builder, only for Customers that switch AI on | EU; zero data retention: nothing is kept after processing. Mistral’s own sub-processors: https://trust.mistral.ai/subprocessors |
| Google LLC / Google Ireland (Google Workspace) | Company e-mail used for support; support e-mails may contain personal data | EU/US, under Google’s DPA and the EU Standard Contractual Clauses |
AI document checks are off by default and are used only when a Customer owner or admin switches them on. Documents requested as criminal-record certificates are never sent to AI; a file uploaded where another type of document is requested is sent before its type is known. Customer data is never used to train AI models.
2. Changes to this list
Before we add or replace a sub-processor, we inform Customers in advance by e-mail to the Customer’s account owner and by updating this page. A Customer may object to the change on reasonable data-protection grounds within 10 days of the notice by e-mail to [email protected], as set out in Section 8.2 of the Data Processing Agreement.
3. Contact
Questions about our sub-processors: [email protected].
Last updated: 8 October 2026