Last updated: 27 June 2026
This page lists the third parties ("Sub-processors") we use to provide Profiling.app, and forms part of our Privacy Policy and Data Processing Agreement.
Each Sub-processor processes personal data only as needed to provide its service to us, under a contract no less protective than our own obligations.
| Sub-processor | Service provided | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| DigitalOcean | Hosting, database, and backups (the application and all primary data) | All data held by the Service | EU — Amsterdam (ams3) | Within EEA — none required |
| CloudAMQP | Managed message broker (RabbitMQ) for asynchronous jobs — email delivery, invoice issuance, reminders | Identifiers and event metadata, plus transactional email content queued for delivery (recipient name, email address, message body) — never questionnaire answers, matrices, or Evaluations | EU — Amsterdam (server hosted on DigitalOcean ams3) | Within EEA — none required |
| Stripe | Payment processing | Billing name and address; card details (entered directly into Stripe); payment records | EU contracting entity (Stripe Payments Europe, Ireland); processing may involve the US | Standard Contractual Clauses |
| Billingo | Issuing legally compliant Hungarian invoices | Billing name, address, and purchase details | Hungary (EU) | Within EEA — none required |
| Mailgun | Transactional and notification email delivery | Recipient email address and email content (sign-in links, invitations, notifications) | EU region (EU infrastructure) | Within EEA — none required |
| Google (OAuth) | "Sign in with Google" authentication only | Google account identifier and basic profile, for users who choose Google sign-in | Global (Google Ireland Limited as EU entity) | Adequacy / Standard Contractual Clauses as applicable |
| Ably | Real-time in-app notifications | Account identifiers, contact details, and notification metadata (event type, status, entity references) — never questionnaire answers, matrices, or Evaluations | Global edge network; may process outside the EEA (no regional data residency on the current plan) | Standard Contractual Clauses |
| Sentry | Error tracking and diagnostics (for both Profiling.app and the PromptJuggler pipeline, on the same account) | Minimal technical data: error reports and an opaque user identifier (UUID). No questionnaire answers, no Evaluations, no IP addresses | US (us.sentry.io) | Standard Contractual Clauses |
| Anthropic | AI-assisted generation of Evaluations (via the PromptJuggler pipeline, using our own Anthropic API key) | The pseudonymised preference matrix (stripped of name and direct identifiers) and our interpretive instructions — no names, no email, no raw answers | United States (Anthropic, PBC) | Standard Contractual Clauses |
Our AI-assisted Evaluation pipeline is provided by PromptJuggler, which is operated by the same Operator as Profiling.app and runs on the same infrastructure. It is therefore not a separate third party. PromptJuggler stores the prompts and Evaluations it processes, so profiling data may rest there as well as in our primary database; a request to delete a person's data removes it from both.
We may add or replace a Sub-processor. When we do, we will update this page and, for customers acting as Controllers under the Data Processing Agreement, provide a reasonable means of learning of the change and objecting on reasonable data-protection grounds, as set out in §8 of that Agreement.
Questions about our Sub-processors:
Tamás Szigeti
privacy@profiling.app