Subprocessors
Everyone who touches customer data on our behalf, what they do with it, and where they are.
In effect since . Webshotter, France.
The data processing addendum authorises the providers below. We keep this on its own page so that it can be updated as quickly as the infrastructure moves.
| Provider | Purpose | Location |
|---|---|---|
| OVHcloud | Application hosting, managed MySQL, managed Redis, and object storage for kept webshots. | France (EU) |
| Laravel Forge | Server provisioning and deployment tooling. Holds infrastructure credentials, not customer data. | United States |
| Sentry | Error monitoring. Receives stack traces, which can incidentally include a URL you asked us to render. | United States |
| Postmark | Transactional email — sign-in, password reset, address verification, and service notices. | United States |
Changes to this list
We give at least 30 days' notice by email to account owners before a new subprocessor starts handling customer data. If you have a reasonable objection on data-protection grounds, tell us within those 30 days at privacy@webshotter.com; if we cannot resolve it, you may terminate the affected part of the service and we will refund the unused portion of your period.
Getting the notice
Notice goes to the email address on the account. If a different address should receive it — a security or procurement alias, typically — tell us and we will add it.
Questions a policy cannot answer
If something here is unclear, or your legal team needs it in another shape, write to us — a person reads that address.