Trust & Security

Subprocessors

To deliver PulsePanels we rely on a small number of third-party providers ("subprocessors"). This page lists them, what they do for us, what data they handle and where they operate.

Effective date
2026-10-03
Last updated
2026-10-03
Version
1.0.0
Status
Published

What is a subprocessor?

Subprocessor. A third-party company that processes personal or customer data on PulsePanels' behalf in order to help us provide our services — for example our hosting, email delivery, or payment providers.

We only engage established providers, under contracts that limit how they may use the data and require them to protect it. Where we act as a processor for customer-managed data, our use of subprocessors is governed by the Data Processing Agreement.

Core subprocessors

These providers support the PulsePanels cloud service for all customers. This list is current as of 3 October 2026.

ProviderService providedData processedLocationPrivacy information
Hetzner Online GmbHHosting of our application servers, PostgreSQL database and cacheAll data stored in the PulsePanels cloud serviceNuremberg, Germany (European Union)hetzner.com/legal/privacy-policy
Cloudflare, Inc.Content delivery, DNS, TLS termination and security (firewall and DDoS protection); off-site backup storage (R2)Website, dashboard and player traffic passing through its network; encrypted copies of our database and media backupsGlobal network; headquartered in the United Statescloudflare.com/privacypolicy
ResendSending service emails such as invitations, password resets, invoices and alertsRecipient email address and the content of the messageUnited Statesresend.com/legal/privacy-policy
Zoho CorporationBusiness email and invoicingContact details and the content of emails exchanged with us; billing contact details and invoice recordsZoho data centres serving our accountzoho.com/privacy
TelegramLets our support team answer support chats that are handed over to a personSupport-chat alerts sent to our team: the customer's name, organisation name and a short preview of the messageGlobal networktelegram.org/privacy

Feature-specific subprocessors

These providers are used only when a customer chooses to use the related feature, or when a feature is configured for their account. If you do not use the feature, the provider does not process your data.

ProviderFeatureData processedLocationPrivacy information
Google LLCMaps, Sign in with Google, the Google Calendar connection, and Gemini AI for AI-assisted features where configuredMap and location lookups; name, email address and account identifier at sign-in; calendar lists and events from the calendars you choose; text you submit to AI-assisted featuresUnited States and globalpolicies.google.com/privacy
Microsoft CorporationSign in with Microsoft and the Outlook calendar connectionName, email address and account identifier at sign-in; calendar lists and events from the calendars you chooseUnited States and globalprivacy.microsoft.com
OpenAIAI-assisted features and the support assistant, where configuredText you submit to AI-assisted features; support chat messagesUnited Statesopenai.com/policies/privacy-policy
AnthropicAI-assisted features and the support assistant, where configuredText you submit to AI-assisted features; support chat messagesUnited Statesanthropic.com/legal/privacy
Cloudflare, Inc. (Workers AI)AI image generation, when you use itThe prompts you submit for image generationGlobal network; headquartered in the United Statescloudflare.com/privacypolicy
StripeCard payments, where offeredBilling contact details and payment information; card details are entered directly with Stripe and are never stored by PulsePanelsUnited States and Irelandstripe.com/privacy

Self-hosted and on-premise deployments

When PulsePanels runs on a customer's own premises or infrastructure, none of the providers above process that customer's data, except any that the customer chooses to enable (for example a map, calendar or AI provider).

How we notify you of changes

We update this page whenever we add or replace a subprocessor. Before a new subprocessor starts processing customer personal data, we give customers at least 30 days' notice, by email or by updating this page. Customers can object to a new subprocessor during that period by emailing us, and we will work with them in good faith to address their concerns.

Get notified of updates

To be notified by email when this list changes, contact privacy@pulsepanels.com and ask to be added to subprocessor-update notifications. There is no self-service subscription at present.

Contact

Change history

  • v1.0.0 · 2026-10-03 — First published version.
  • v0.1.0-draft · 2026-07-28 — Initial internal draft. Provider entities, locations and dates pending confirmation.