The providers involved in running Seqlense GDPR, what each one does, and where.
| Provider | What it does for us | Location | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Hosts the database of scan data (requests, third parties, cookie names and attributes). | Germany (company), servers in the EU | EU, GDPR applies directly |
| Cloudflare, Inc. | Runs the service that relays our transactional emails, and the AI models (Workers AI) used to name unknown third parties and to read cookie policies. | United States, global network | EU-US Data Privacy Framework, Standard Contractual Clauses |
| Scaleway SAS | Sends our transactional emails (alerts, reports, task notifications). | France | EU, GDPR applies directly |
| Cyber Dream SAS a company of the same group as Seqlense | Operates the scanning service (mlab.sh) that loads public pages in a browser, and provides the threat intelligence and data enrichment used to identify third parties. | France (Nantes), on its own infrastructure in France | EU, GDPR applies directly; data processing agreement (Art. 28 GDPR). Its own subprocessors are listed in its DPA, including Cloudflare under the Data Privacy Framework or Standard Contractual Clauses. |
We update this list before adding a provider. To be told of changes, write to [email protected].