Legal
Sub-processors
Por ahora este documento solo está disponible en inglés.
Version 1.0 · Last updated: 1 October 2026
These providers process personal data for our clients when we provide Brova Cloud.
Our data processing agreement binds each of them to equivalent obligations.
| Provider | Service | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany | Servers and storage for all hosted sites, applications and backups | All data stored on the hosted services | Helsinki, Finland | Not needed (EU) |
| Plus Five Five, Inc. ("Resend"), San Francisco, USA | Relay for outgoing email from client sites and domains | Sender and recipient addresses, message content and metadata | United States | EU–US Data Privacy Framework and EU Standard Contractual Clauses |
| Cloudflare, Inc., San Francisco, USA | DNS, CDN and security filtering, only for sites where the client chose Cloudflare, and only where the Cloudflare account is held by Brova | Visitor IP addresses and request data of those sites | Global network | Standard Contractual Clauses and EU–US Data Privacy Framework (Cloudflare DPA) |
Not sub-processors: software we run ourselves on our own servers (for example the
hosting control panel, malware scanner and container platform), and providers that
clients engage directly (for example a client's own Cloudflare account, domain
registrar or payment provider).
Changes: we inform clients at least 14 days before adding or replacing a
sub-processor.