Subprocessor List

Effective 2026-08-16 · Version 1.0

Amazon Web Services

Cloud infrastructure, hosting, storage and application logs; primary region eu-central-1. Exact AWS services and contracted safeguards must be verified from the production account.

Cloudflare

DNS/CDN; requests, IP addresses and edge metadata. Cloudflare Analytics is not used. Global edge processing is governed by the contracted DPA and required transfer safeguards.

Customer-selected services

BYOK AI providers are selected by customers and are not fixed Kommerzdock subprocessors. Role depends on contract and data flow. PayPal is added only after production activation and review.