Legal
Sub-processors
GDPR Art. 28 register. Every third-party processor that handles tenant data appears here. Updated on change; notifications are sent to all tenants ≥ 30 days before new sub-processors are added.
The canonical register is
docs/legal/subprocessors.yaml in the source tree. This table is rendered from it via /v1/privacy/subprocessors — it is the register, not a copy of it.| Sub-processor | Purpose | Data categories | Region | Safeguards |
|---|---|---|---|---|
| AWS (or GCP) | Core hosting, object storage, compute | tenant-scoped data | eu-west-1 (default) | DPA + SCCs |
| ClickHouse Cloud (if managed) | Analytical warehouse | canonical series, tenant BYO-data | customer-selected | DPA + SCCs |
| Grafana Cloud | Observability | operational logs + metrics (non-tenant) | eu | DPA |
| PagerDuty | On-call paging | alerts + incident metadata | us | SCCs |
| Stripe | Billing | billing contact, card token | eu+us | SCCs |
| PostHog (self-hosted) | Product telemetry | pseudonymous event data | eu (self-hosted) | self-hosted — no third-party sub-processing |
| SendGrid / Postmark | Transactional email | email addresses | us | SCCs |
| GitHub | Source control, CI/CD | source code, deployment artefacts | us | GitHub standard DPA |
DPA available on request
Enterprise tenants receive a signed Data Processing Addendum plus Standard Contractual Clauses where applicable. Contact privacy@energy-intelligence.eu.