Sub-processors

These vendors process personal data on our behalf as part of delivering our services.

VendorPurposeLocationDataLinks
CloudflareCDN caching for jaapi.co domainUSCached images, and each visitor's IP address in the edge request logs
Google WorkspaceIdentity provider, email, document collaboration, calendar, SSO authenticationEUEmployee PII, email communications, business documents (may contain customer PII), authentication credentials
HetznerStore platform hosting (application servers and PostgreSQL databases per region), database backups, CDN origin serverEU (Germany), USAll store data - user accounts, orders, shipping addresses, credit balances, support tickets, product images, database backups
MailerSendTransactional email deliveryEU (Belgium)Email addresses, email content
SlackTeam communication, alertsUSInternal communications (may contain customer PII from support discussions)
StripePayment processingEU (Ireland)Payment card data (tokenized), billing addresses, transaction history
VercelDNS and domain registrar, marketing website hosting (jaapi.com), edge proxy for stores served on customer-owned domains that still point at itUSDNS records, marketing website code; store traffic in transit (sign-ins, orders, addresses) for customer-owned store domains not yet repointed to Jaapi's edge, not stored

Other Vendors

These vendors support our operations but do not process customer personal data.

VendorPurposeLinks
Better StackExternal uptime monitoring of each region, heartbeat monitoring of scheduled jobs, public status pages
CalendlyDemo booking widget on jaapi.com
CookiebotCookie consent banner and consent mode signals on jaapi.com, loaded through the tag manager
FathomRecording and transcription of sales meetings, feeding the proposal pipeline
FortnoxBookkeeping, invoicing
GoDaddyRegistrar and DNS zone of jaapi.com (marketing website, trust center, proposal tool)
JuniBusiness banking, corporate card, expense management
PandadocDocument signing, employment contracts