Subprocessors

This page lists the external providers ("subprocessors") Ordnary engages to process personal data in delivering our services. We impose data-protection obligations on each subprocessor consistent with our Privacy Policy and our Data Processing Addendum, and we remain responsible for their processing on our behalf.

We host our services primarily in the European Union. The categories below describe the function of each provider. The specific provider used may vary by service and region, and we update this list as our infrastructure evolves.

Infrastructure and hosting

• Amazon Web Services (S3): object storage and backups, via S3-compatible storage. Region: EU.
• Cloudflare: CDN, DNS, edge network, TLS, and DDoS protection. Region: global edge network.

Platform and operations

• Managed database and caching providers: supporting services for our managed PostgreSQL/MySQL databases and our managed Redis cache.
• Email delivery provider: transactional email and notifications.
• Error monitoring and analytics provider: performance monitoring, error reporting, and product analytics.

Payments

• Payment processors (card networks): card payment processing via Ordnary Pay.
• PayPal: PayPal payments via Ordnary Pay.
• Wero / iDEAL: bank payments via Ordnary Pay.

AI and model serving

The AI features in our services are powered by Google's Gemini models, accessed through Google Cloud (Vertex AI) as a subprocessor. Ordnary does not train or operate its own AI models. Where a feature uses another third-party model or AI provider, that provider is engaged as a subprocessor under equivalent obligations, and we list it here or in the relevant product documentation.

Changes and objections

We update this page when we add or replace a subprocessor and, for business customers under the Data Processing Addendum, provide notice and a reasonable opportunity to object on reasonable data-protection grounds.

Want to stay informed of changes, or want to raise an objection? Email privacy@ordnary.com.