This text is a draft and is being reviewed by our lawyers. It may change before it takes effect.
To run your portal we rely on the companies below. Each processes customer data only for the purpose listed, under a written agreement with obligations at least as protective as our Data Processing Agreement.
Who processes data for us
| Company | What it does for us | Where |
|---|---|---|
| Hetzner Online GmbH | Servers and backups for installs hosted in Germany | Germany |
| Our hosting provider in Turkey | Servers and backups for installs hosted in Turkey | Turkey |
| Laravel Forge (Laravel Holdings Inc.) | Server management and deployments; no customer data is stored there | United States |
| Postmark (ActiveCampaign, LLC) | Sending the emails an install sends, and their delivery status | United States |
| Cloudflare, Inc. | DNS for epicportal.io addresses, and bot protection on forms | United States, global network |
| Google LLC | Sign in with Google and Google Calendar, when a customer connects them | United States |
| Microsoft Corporation | Sign in with Microsoft and Microsoft calendars, when a customer connects them | United States |
Transfers outside your country
Your portal and its backups stay in the country you chose, Germany or Turkey. Some of the services above are based in the United States: emails your portal sends pass through Postmark, and sign-in with Google or Microsoft involves those companies when you choose to use it. Such transfers rest on the European Commission's standard contractual clauses or an adequacy decision, and, for data subjects in Turkey, on the safeguards Article 9 of Law No. 6698 requires.
Changes to this list
We update this page before a new subprocessor starts handling customer data and tell customers who asked to be told by email at least 30 days ahead, so they can object as the Data Processing Agreement allows. Write to [email protected] to be told.