LEGAL · VERSION 2026-07-26
Subprocessor List
Providers authorized to process customer personal data for the Snitch service.
- Effective:
- 26 July 2026
- Operator:
- Phillip InfoSec · CVR 41892463
Active service providers
| Provider | Purpose | Primary location / safeguard |
|---|---|---|
| Vercel | Website and frontend delivery | Deployment region and transfers governed by contract/DPA |
| Hetzner | Backend, database and service infrastructure | Germany / EEA |
| Discord | OAuth, guild access and moderation actions | Provider terms; transfers assessed under applicable mechanism |
| Stripe | Subscription checkout, billing and tax data | Provider DPA and applicable transfer mechanism |
| PostHog EU | Consent-gated product analytics | EU cloud endpoint |
| CookieYes | Consent banner, preference and consent records | Provider DPA and applicable transfer mechanism |
| X | Consent-gated advertising delivery and conversion measurement | Provider DPA and applicable transfer mechanism |
| Consent-gated advertising delivery, conversion measurement and campaign reporting | Provider DPA and applicable transfer mechanism | |
| Calendly | Sales call scheduling and attributed booking lifecycle events | Provider DPA and applicable transfer mechanism |
| OpenRouter | AI request routing for enabled moderation models | Minimized request content; provider/transfer controls reviewed |
| Production S3-compatible storage provider | Private message images and privacy exports | Vendor and region must be verified before publication |
AI service providers
The list above identifies the AI service providers currently authorized to process moderation data. If we begin using another AI provider, we will update this list and provide notice in accordance with the change process below.
Change notice
Material new subprocessors will be announced at least 30 days before use where practicable. Customers may object on reasonable data-protection grounds under the DPA by emailing phillip@golemgrid.com.