Subprocessors
Third-party providers Eurobase uses for operating the platform.
Provider inventory for operating the platform.
Position
A subprocessor is a provider Eurobase uses to process customer data while delivering the service. The list below matches the provider stack used for platform operation.
List
| Provider | Entity / region | Purpose | Data | Status |
|---|---|---|---|---|
| Scaleway | Scaleway SAS · France / EU | Hosting, runtime, database, storage, and email delivery infrastructure. | Account, project, workload, log, storage, runtime, and email delivery metadata. | Active infrastructure provider for hosted operation. EU provider terms and DPA apply. |
| GitHub | GitHub, Inc. · United States / global | OAuth, GitHub App installation, repository connection, webhooks, source metadata, and deploy triggers. | GitHub identity, installation, repository, branch, commit, webhook, and deploy metadata. | Active when a user connects GitHub. Transfers use GitHub contractual transfer safeguards. |
| Stripe | Stripe Payments Europe, Ltd. and Stripe group services · Ireland / global | Checkout, subscriptions, invoices, payment status, tax handling, and customer portal. | Billing identity, invoice, tax, subscription, cancellation, and payment status metadata. | Paid checkout and subscription provider. Stripe contractual transfer safeguards apply. |
Retention of provider copies
The retention table describes Eurobase records. Deletion from Eurobase's database does not itself delete infrastructure logs, backups, repository-provider records or Stripe records. No single expiry period for these separate copies is currently confirmed here. Eurobase handles customer deletion or return instructions under the DPA; providers acting as independent controllers, including Stripe for some payment processing, may retain records under their own legal duties. Request information about a particular copy at privacy@eurobase.dev.
Changes
Eurobase gives advance notice of a new or replaced material subprocessor by updating this page and, where account contact details are available, by service notice or direct email. Customers may object on reasonable data-protection grounds by contacting privacy@eurobase.dev within 30 days after notice. Eurobase will respond to the objection by resolving it, avoiding the affected processing, or allow termination of the affected service. Restricted transfers use an adequacy decision, EU Standard Contractual Clauses, UK transfer terms where applicable, or another lawful transfer mechanism.