Legal
Sub-processors
These are every third party that processes data on Declara’s behalf. We will tell you before adding one that touches personal data, and you may object.
The processor engaging these sub-processors will be [entity to be named]. The company is not registered yet, so this document states the position that will apply rather than one that binds anybody today, and it takes effect with the terms when the entity does. You will find that said here rather than find a name invented for it.
| Provider | Purpose | Where it runs | Personal data |
|---|---|---|---|
| Vercel | Hosting and compute | Frankfurt, Germany | Yes |
| Neon | Database | Frankfurt, Germany | Yes |
| Resend | Transactional email | Not yet stated | Yes |
| StripeActs as its own controller | Payments | Not yet stated | Yes |
| Upstash | Caching and rate limits | Not yet stated | No |
Where a row says the location is not yet stated, we have not confirmed it and would rather say so than print a region we have not checked. Ask and we will confirm in writing.
What “EU hosting” means here
The database, file storage and compute all run in Frankfurt. Stated precisely: the infrastructure is in the EU and our providers are US companies, so this is EU hosting rather than EU legal control. If your procurement needs the latter, ask and we will tell you honestly whether we can meet it.
Changes
This list last changed on . A notification address will be published here alongside the company details.
In effect from . Earlier versions are available on request.