Last updated: 2026-05-01. We notify customers 30 days before adding any new subprocessor.
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen, DE |
Server hosting; primary infrastructure | Germany (Falkenstein, Nuremberg) | EU controller-to-processor; no transfer out of EU |
| Sinch Email Europe AB (Mailgun) | Transactional email delivery | EU region (api.eu.mailgun.net) | EU controller-to-processor; no transfer out of EU |
| Stripe Payments Europe Ltd 1 Grand Canal Street Lower, Dublin, IE |
Payment processing | Ireland (EU) | EU controller-to-controller (Stripe is independent controller for payment data) |
| MaxMind, Inc. Waltham, MA, USA |
GeoIP database (downloaded; lookups local) | US (data download); EU (lookups) | SCCs Module 1 + supplementary measures (no end-user PII transferred) |
Question about a subprocessor? dpo@trustedcaptcha.com. We make our subprocessor agreements available for review on request to enterprise customers under appropriate confidentiality.
