# Sub-processors

_Last updated: October 20, 2025_

## 🇪🇺 European sub-processors

Phare prioritizes European companies that use European hosting whenever possible, this is to ensure:

- **Better Privacy**: GDPR compliance isn't just a checkbox, it's baked in
- **Supporting Local**: Keep the digital economy thriving in Europe
- **Faster Service**: Lower latency for Phare's mostly European users

When Phare absolutely must use non-European providers, Phare ensures they meet the highest security standards and host data in European datacenters wherever possible. For some services like payments and telecommunications, global data residency is necessary by design.

### 🇸🇮 [Bunny](https://bunny.net/)
- **Address**: _BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia_
- **Usage**: CDN, DNS, WAF, and hosting Phare's monitoring agents across multiple regions
- **Data location**: 🌍 119 edge locations across the world
- **Certifications**: ISO 27001

### 🇩🇪 [Hetzner](https://www.hetzner.com/)
- **Address**: _Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany_
- **Usage**: Main application and database hosting
- **Data location**: 🇩🇪 Germany
- **Certifications**: ISO 27001:2017

### 🇫🇷 [Scaleway](https://www.scaleway.com/)
- **Address**: _Scaleway SAS, 8 rue de la ville l'eveque, 75008 Paris, France_
- **Usage**: Encrypted backup storage and transactional emails
- **Data location**: 🇫🇷 France
- **Certifications**: ISO 27001:2022

### 🇫🇷 [Brevo](https://www.brevo.com/)
- **Address**: _Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France_
- **Usage**: Newsletter and onboarding delivery (only if you subscribe!) + failover transactional emails
- **Data location**: 🇪🇺 [European union](https://help.brevo.com/hc/en-us/articles/360001005510-Data-storage-location)
- **Certifications**: ISO 27001:2013

### 🇫🇷 [Mistral AI](https://mistral.ai/)
Personal data are removed from the payload sent to Mistral AI, this process is described in the [privacy section](https://docs.phare.io/uptime/incidents#privacy) of the Incident AI documentation.
- **Address**: _Mistral AI SAS, 15 rue des Halles, 75001 Paris, France_
- **Usage**: AI-generated incident summary and post-mortem
- **Data location**: 🇪🇺 [European Union](https://help.mistral.ai/en/articles/347629-where-do-you-store-my-data-or-my-organization-s-data)
- **Certifications**: ISO 27001:2022 + SOC 2

### 🇳🇱 [Lettermint](https://lettermint.co/)
- **Address**: _Lettermint V.O.F., Willemsvaart 16 B, 8019 AB Zwolle, Netherlands_
- **Usage**: Failover transactional emails
- **Data location**: 🇪🇺 European Union

### 🇮🇪 [Paddle](https://www.paddle.com/)
Paddle is a trusted merchant of record with a proven track record of security and reliability, You will have to share your payment information with Paddle to subscribe to a Phare Scale plan.
- **Address**: _Paddle Payments Ltd., The Academy, 42 Pearse Street, Dublin, D02 YX88, Ireland_
- **Usage**: Payment processing, subscriptions, and invoicing
- **Data location**: 🌍 Global
- **Certifications**: PCI DSS v4.0.0 + SOC 2 Type II

### 🇳🇱 [Infobip](https://www.infobip.com/)
- **Address**: _Infobip Ltd, 181 Queen Victoria Street, London EC4V 4EG, England_
- **Usage**: SMS and voice notifications
- **Data location**: 🌍 [Global](https://www.infobip.com/docs/essentials/support/infrastructure-overview)
- **Certifications**: ISO 27001:2022

* * *

## 🌍 Non-European sub-processors

### 🇺🇸 [Sentry](https://sentry.io/)
Error tracking is configured to not process any personal data, but it can't be guaranteed that an error stack trace won't ever contain personal information.
- **Address**: _Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States of America_
- **Usage**: Error tracking and performance monitoring
- **Data location**: 🇩🇪 Germany
- **Certifications**: ISO 27001:2022

### 🇺🇸 [PostHog](https://posthog.com/)
Your IP is anonymized with a Bunny proxy before being sent to PostHog, no personal data should be processed by them.
- **Address**: _PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, United States of America_
- **Usage**: Product and website analytics
- **Data location**: 🇩🇪 Germany
- **Certifications**: SOC 2 Type II

### 🇺🇸 [Mintlify](https://mintlify.com/)
Your IP is anonymized with a Bunny proxy before being sent to Mintlify, no personal data should be processed by them.
- **Address**: _Mintlify, Inc., 1 Post St Ste 1800, San Francisco, CA 94104, United States of America_
- **Usage**: Documentation and knowledge base
- **Data location**: 🌍 Global
- **Certifications**: SOC 2 Type II

## How Phare Protects Your Data

Phare tries to minimize the number of sub-processors to the absolute minimum required to provide a reliable platform. Personal data is only transferred when absolutely necessary to provide the service, giving you as much control as possible over your data.

## When Things Change

If Phare needs to add, remove, or change any sub-processors, you'll get **30 days advance notice** via email. Don't like a new partner? You can object or close your account, no hard feelings!

* * *

## Questions?

If you have any questions or concerns about Phare's sub-processors, please don't hesitate to reach out.

Send an email to support@phare.io, or check out the [contact page](/content/contact/index.html) for more options.