Sub-processors
These providers take part in delivering the service and may process data on our behalf. Any change to this list is published here.
Last updated: July 2026
Providers
| Provider | Purpose | Country |
|---|---|---|
| Scaleway SAS | Hosting of the application, database, backups and encrypted archives | France |
| Stripe Payments Europe, Ltd. | Subscription payments on its own hosted pages | Irlande |
| Google Ireland Ltd. · Microsoft Ireland Operations Ltd. | User authentication (OAuth) | Irlande |
| Intuition Machines, Inc. (hCaptcha) | Bot filtering on the public sign-up form | États-Unis |
| HubSpot Ireland Ltd. | Customer record in the CRM after subscription | Irlande |
| Infomaniak Network SA | Delivery of transactional email | Suisse |
Where data is held
Platform data is hosted in France. The authentication and payment providers are established in the European Union. Only the bot filtering on the public sign-up form relies on a provider established in the United States: it processes the visitor’s IP address and their interaction with that form, and nothing from a customer workspace.
Retention after the contract ends
After access is cut off, your data stays exportable for 30 days, then is deleted from our live databases. An encrypted archive is then kept for 2 years, in France and with the single hosting provider listed above, to meet our legal retention obligations; no other sub-processor has access to it. It is permanently erased when the term ends.
Advance notice
We notify you before adding or replacing a sub-processor. To be informed, write to hello@certatix.com.