This document is a working draft until it has been reviewed by our lawyers before launch. The binding version will be published here and dated.
This is the list for the current service. ChaosDesk runs on private beta infrastructure: one server in Falkenstein, Germany, with the services below. Changes are announced to workspace owners 30 days in advance.
In use today
| Subprocessor | Purpose | Location of processing |
|---|---|---|
| Hetzner Online GmbH | Hosting: the server that runs the application, API, database, search and queues, and its daily server backups | Falkenstein, Germany (EU) |
| Cloudflare, Inc. | DNS, reverse proxy and TLS for every chaosdesk.io host, DDoS and bot protection, the sign-up check (Turnstile) and the status page. Traffic is terminated at the Cloudflare location nearest the visitor; the origin and all stored data are in Germany | Global edge network; company in the United States (SCCs) |
| DigitalOcean, LLC | Object storage (Spaces) for attachments, raw inbound mail and the off-site database backups | Frankfurt, Germany (EU); company in the United States (SCCs) |
| Resend | Sending and receiving email for workspaces, and system email (sign-up, verification, password reset, alerts) | EU region; company in the United States (SCCs) |
| Google (Google Workspace) | Our own email, calendar and documents, so a message you send to an @chaosdesk.io address is processed there | EU; SCCs where Google processes outside the EU |
| Sentry | Application error reports (stack traces and request context, which can contain personal data) | Sentry EU region, Frankfurt, Germany (EU); company in the United States (SCCs) |
| Paddle.com Market Ltd | Payments, invoices and sales tax, as merchant of record. During the private beta only Paddle’s sandbox is connected, so no live payment data is processed yet | United Kingdom (adequacy decision, valid to 27 December 2031) |
Configured but not active
| Subprocessor | Purpose | Status |
|---|---|---|
| Anthropic, PBC | AI features (copilot, summaries, the AI agent), on text from which personal data has been masked, never used to train models | Not live. No API key is configured on the beta, so the AI features are off and no data has been sent. We will give 30 days’ notice before this changes. |
| Backblaze, Inc. | Object storage and immutable off-site backups (EU Central data region) | Planned for the production platform, in place of DigitalOcean Spaces. Not in use today. |
What is not a subprocessor
- Messaging providers you connect yourself (for example WhatsApp, SMS gateways, Facebook and Instagram) process messages under your own agreement with them, not ours.
- Sign-in with Google or Microsoft happens at your own identity provider: it checks who you are and returns your name and email address to us. We have no agreement with them on your behalf.
- Website analytics on chaosdesk.io run on our own servers (see cookies and local storage). Plausible Analytics (EU) is off by default; if we ever turn it on it only covers visitors of chaosdesk.io who consent, never workspace data.
Where a subprocessor is outside the EU, transfers rely on an adequacy decision or the EU Standard Contractual Clauses, as described in the data processing agreement. This page is a draft awaiting legal review: the exact contracting entities and their data processing agreements are confirmed in the final version. Questions: [email protected].