Vendors

Third-party services used in our operations

Sub-processors

These vendors process personal data on our behalf as part of delivering our services.

VendorPurposeLocationDataLinks
AWSDatabase hosting (RDS PostgreSQL)EU (Frankfurt)Customer data, order data, user accounts, audit logs
Google WorkspaceIdentity provider, email, document collaboration, calendar, SSO authenticationEUEmployee PII, email communications, business documents (may contain customer PII), authentication credentials
JuniBusiness banking, corporate card, expense managementEU (Sweden)Sales transactions from Stripe, purchase receipts with customer shipping addresses
MailerSendTransactional email deliveryEU (Belgium)Email addresses, email content
PylonCustomer support ticketing, manual order handlingUSSupport ticket content, customer communications
SlackTeam communication, alertsUSInternal communications (may contain customer PII from support discussions)
StripePayment processingEU (Ireland)Payment card data (tokenized), billing addresses, transaction history
VercelApplication hosting, DNS, cron jobsEU (Frankfurt)Environment variables, serverless function logs, application code, transient request data

Other Vendors

These vendors support our operations but do not process customer personal data.

VendorPurposeLinks
CloudflareCDN caching for jaapi.co domain
DrataCompliance automation platform
FortnoxBookkeeping, invoicing
GitHubSource code repository, CI/CD
HetznerCDN origin server hosting
PandadocDocument signing, employment contracts