Subprocessors
These providers may process customer personal data to operate FoxDesk Cloud. They are not permitted to use customer workspace data for their own advertising.
Hetzner Online GmbH
Purpose: European hosting infrastructure, compute, database operation and backup storage. Primary processing location: European Union in the selected EU data centre. Transfer safeguard: no routine restricted transfer is intended for the hosted workload; provider support access remains subject to its contract and applicable law.
Cloudflare, Inc. and relevant Cloudflare contracting entities
Purpose: DNS, network delivery and protection, object storage, email routing and transactional email delivery. Processing locations: European Economic Area and global network locations as needed for delivery and security. Transfer safeguard where required: adequacy framework participation and/or EU Standard Contractual Clauses with supplementary measures under the applicable Cloudflare terms.
Stripe Payments Europe, Limited and relevant Stripe affiliates
Purpose: hosted checkout, subscription billing, invoices, tax/VAT handling, fraud prevention and customer billing portal. Stripe receives billing data only when the customer uses paid billing. Processing locations: European Economic Area and other Stripe service locations. Transfer safeguard where required: adequacy framework participation and/or EU Standard Contractual Clauses under the applicable Stripe data-processing terms. FoxDesk does not store complete payment card details.
Change notice
This list is effective from August 6, 2026. We will normally notify workspace administrators at least 15 days before a material new sub-processor begins processing customer workspace data, by updating this page and by email or in-service notice. A customer may object during that period on reasonable data-protection grounds as described in the DPA. Emergency replacements needed for security or continuity may be notified sooner.
Questions and safeguards
Contact [email protected] for questions about a provider, processing location, contractual safeguard or a pending change. We may provide relevant information subject to provider confidentiality and security restrictions.
Nothing in these documents excludes a statutory duty, remedy, or right that applicable mandatory law does not permit the parties to exclude or limit.