Subprocessors

• Amazon Web Services (AWS) — sending email (SES) and text messages (SNS), storing team logos (S3), and running our queues and functions. Location: EU (Frankfurt, Germany). Transfer basis: processing in the EU under the AWS data processing terms.
• Our database host — stores accounts, teams, workspaces and report data. Location: EU (Frankfurt, Germany). Transfer basis: none needed (EU).
• Vercel — hosts the website, the dashboard and the API. Our functions run in Frankfurt (fra1), but Vercel is a United States company. Transfer basis: EU–US Data Privacy Framework or Standard Contractual Clauses.
• Stripe — payments, invoices and tax. Location: United States and EU. Transfer basis: EU–US Data Privacy Framework or Standard Contractual Clauses.
• Groq — generates the answers of the AI assistant and, if you turn them on, the summaries in AI insight emails. Location: United States. Transfer basis: [TO BE CONFIRMED: data processing terms and Framework status].

Sign-in (Alternative Auth), the support chat (answered from WNC Base) and the AI hotfix feature are operated by us, not by third parties.

Integrations you switch on (Jira, monday.com, GitHub, the AI provider you choose with your own key, your webhooks) act on your instruction and under their own terms. They are not our sub-processors.