Sub-Processors

Last updated: [effective date]

This page lists the sub-processors that Red Code Company, s.r.o. ("we") engage to process personal data on behalf of our business customers in connection with the daat.red service. It is referenced by our Data Processing Agreement (Annex III).

For personal data submitted to the API, our customer is the controller and we act as a processor. The parties named below act as our sub-processors and/or as independent recipients where their role requires it.

All processing carried out by us for the Service takes place within the European Union. Some card networks / payment systems inherently involved in a customer's own transaction may be located outside the EEA; see the "International transfers" section of the Data Processing Agreement and the Privacy Policy.

How to receive change notifications

We give prior notice of the addition or replacement of a sub-processor at least [sub-processor change notice period — suggested 30 days] in advance. To subscribe to notifications, [describe the mechanism — e.g. email notify-list, RSS, or account notification setting]. Customers may object to a new sub-processor on reasonable data-protection grounds as set out in the Data Processing Agreement.

Current sub-processors

Name	Purpose	Location
Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany)	Cloud hosting, compute, storage and network infrastructure for the Service	European Union — [confirm data-centre location(s), e.g. Germany (Nuremberg / Falkenstein) and/or Finland (Helsinki)]
Card networks / payment systems	Receiving forwarded Card check verification requests and returning the issuer name-match response and check code, under our own direct contractual relationships with those networks. Only the customer's chosen transaction determines which network is involved.	[location(s) — one or more may be outside the EEA; identify the transfer mechanism relied upon]
[IP-intelligence / geolocation data provider]	Providing geolocation and network/ASN reference data used to answer the IP info method	[location; confirm whether a provider is used or data is held locally]
[email-intelligence data provider]	Providing public profile/name data used to answer the Email info method	[location]
[BIN reference-data provider]	Providing issuer, country and currency reference data used to answer BIN lookup and Card info	[location]
[email-deliverability infrastructure]	Performing or supporting the live SMTP deliverability probe used by the Email check method	[location; note this method contacts the recipient mail server for the domain being checked]
[error / performance monitoring provider]	Application error tracking and performance monitoring	[confirm EU region / EU data residency]
[transactional email provider]	Sending account, security, billing and service-notification emails to customer account users	[confirm EU region / EU data residency]
[any other operational sub-processor — e.g. secrets management, backup, CDN, DNS, support tooling]	[PLACEHOLDER]	[PLACEHOLDER]

Sub-processors for our own controller processing

The following are used for data for which Red Code Company is a controller (account, authentication, billing and support data) rather than a processor. They are listed here for transparency.

Name	Purpose	Location
[accounting / invoicing provider]	Invoicing, accounting and financial records	[PLACEHOLDER]
[payment provider, if card/bank payments are accepted for Credit top-ups]	Processing payments for Credit purchases	[PLACEHOLDER]
[support / ticketing tool, if any]	Handling customer support requests	[PLACEHOLDER]

Changes

We will update this page when a sub-processor is added, replaced or removed. The "Last updated" date above reflects the most recent change.