Sub-processors
Sub-processors used by ReviewBird, the purpose of processing, transfer safeguards, and each provider's website. This register lists only providers that process personal data on behalf of the customer (Article 28 GDPR). Providers that process no personal data are documented separately below for transparency.
Dated July 27, 2026.
Non-binding English translation. The German version prevails.
Sub-processors (process personal data on behalf of the customer)
| Sub-processor | Legal entity | Country | Purpose of processing | Transfer safeguards | Website |
|---|---|---|---|---|---|
| Hetzner | Hetzner Online GmbH | Germany | Cloud hosting and infrastructure | Not required (EU processing) | https://www.hetzner.com |
| seven.io | seven communications GmbH & Co. KG | Germany | SMS and message delivery | Not required (EU processing) | https://www.seven.io |
| Cloudflare | Cloudflare, Inc. | USA | Web infrastructure, security and storage services | EU-US Data Privacy Framework certified, SCCs as fallback | https://www.cloudflare.com |
| Postmark | AC PM LLC (ActiveCampaign) | USA | Transactional email delivery | EU-US Data Privacy Framework certified | https://postmarkapp.com |
| OpenAI | OpenAI Ireland Ltd | Ireland | AI-based document and text processing | EU contracting entity, SCCs for intra-group transfers | https://openai.com |
| Apify | Apify Technologies s.r.o. | Czech Republic | Retrieval of publicly accessible business listing and review data | Not required (EU processing) | https://apify.com |
Note on OpenAI: processing takes place via the OpenAI API and is limited to what is necessary to provide the services; use of the data to train AI models is contractually excluded.
Not sub-processors (no personal data processed on behalf of the customer)
These providers are used by ReviewBird but do not process end-customer personal data on behalf of the customer, so they are not sub-processors within the meaning of Article 28 GDPR and are not listed in Annex IV of the DPA. They are documented here for transparency.
| Provider | Legal entity | Country | Role | Reason not a sub-processor | Website |
|---|---|---|---|---|---|
| Stripe | Stripe Payments Europe, Limited | Ireland | Payment processing in the billing relationship between the provider and the customer | Processes the customer's billing data, not end-customer data processed on the customer's behalf | https://stripe.com |
| Multilogin | Eyes of Wonder Software LLC | UAE | Browser profiles and proxy / IP infrastructure | No personal data is routed through this service; used only for browser profiles and for proxy and IP rotation | https://multilogin.com |
| IPRoyal | IPRoyal Services FZE LLC | UAE | Proxy / IP infrastructure | No personal data is routed through this service; used only for proxy and IP rotation | https://iproyal.com |