Sub-processor list
As of: 28.04.2026
This English text is a convenience translation. The legally binding version is the German UAV-Liste; in case of discrepancies, the German version prevails.
This sub-processor list ("sub-processor list") contains the sub-processors used by Systempilot within the meaning of the DPA. It is part of the DPA insofar as reference is made to this list there. Changes are communicated in accordance with the provisions of the DPA.
Data protection contact: privacy@systempilot.net
| Provider | Address / contracting party | Purpose / service | Categories of personal data | Processing location / data centre |
|---|---|---|---|---|
| Hetzner Online GmbH | Industriestr. 25, 91710 Gunzenhausen, Germany | Hosting, server infrastructure, cloud and server operation | Depending on the project: business and contact data, system data, application data, technical logs | Germany / Finland, depending on the product and location used. Systempilot usually relies on locations in Nuremberg or Falkenstein (both Germany). |
| IP-Projects GmbH & Co. KG | Am Vogelherd 14, 97295 Waldbrunn, Germany | Hosting, server operation, domains, technical infrastructure | Business and contact data, technical data, hosting/system data | Frankfurt metropolitan area, Germany |
| Zoho Corporation GmbH | Trinkausstr. 7, 40213 Düsseldorf, Germany | CRM, support, project management, email, file storage, appointment booking, invoicing, password management and related Zoho services | Business and contact data, communication data, project and support data, invoice data, system and usage data | Amsterdam, Netherlands or Dublin, Ireland. |
| Google Ireland Limited / Google LLC | Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC, USA | Google Workspace, in particular Google Calendar, and where applicable documents, email, video conferencing or file storage | Business and contact data, calendar data, communication data, document contents, technical usage data | EU/EEA, in particular Ireland, Netherlands, Finland, Denmark and Belgium, depending on the respective Google service and the tenant/service configuration. |
| Microsoft Ireland Operations Limited / Microsoft Corporation | One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Microsoft Teams, and where applicable Outlook, Office documents, Azure services | Business and contact data, communication data, meeting data, document contents, technical usage data | Depending on the Microsoft service used and tenant configuration; typically EU/EEA with the corresponding configuration, otherwise per the Microsoft DPA and EU Data Boundary provisions. |
| Zoom Communications, Inc. | 55 Almaden Blvd, 6th Floor, San Jose, CA 95113, USA | Video conferencing, online meetings, recordings/transcripts, communication with customers and project participants | Business and contact data, meeting metadata, audio/video data, chat content, where applicable shared screen content, recordings and transcripts | Germany/EU where configured accordingly, in particular for recordings, transcripts and selected real-time data; otherwise, where applicable, third-country processing in accordance with the Zoom contract documents |
| tl;dv / tldx Solutions GmbH | Aachen, Germany | Meeting recording, transcription, summary and project documentation | Names, email addresses, meeting audio, video, transcripts, chat/meeting metadata | Europe, or via Mistral AI for AI functions |
| Mistral AI | Mistral AI SAS, Paris, France | AI processing, summarisation, analysis and processing of text content, in particular meeting transcripts, support texts or technical content | Depending on use: meeting transcripts, support texts, technical content, document contents | EU/EEA, according to the provider in particular France/Sweden, depending on the chosen service. |
| Functional Software, Inc. (d/b/a Sentry) | 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Error analysis, monitoring, application performance monitoring | Technical error and diagnostic data; customer data is, where possible, not transferred to logs or only in minimised form. | Iowa, USA |
| Cloudflare, Inc. | 101 Townsend St, San Francisco, CA 94107, USA | DNS, CDN, DDoS protection, web application firewall, performance and security services | IP addresses, request data, technical connection data, log data | Global network; processing of technical connection data depending on the location of the accessing user and Cloudflare's infrastructure. Third-country transfers occur in accordance with the Cloudflare data protection terms and appropriate safeguards. |
| HostProfis (3CX) | Hans-Sittenberger-Str. 13, 9500 Villach, Austria | Phone system, VoIP, communication | Contact data, phone numbers, call metadata, where applicable voicemail/call recordings, technical logs | Austria (Vienna, Graz, Linz, Salzburg, Innsbruck, Villach) |
| GitHub, Inc. | 88 Colin P. Kelly Jr. Street, San Francisco, California, USA | Source code management, issues, technical documentation, deployment/development processes | Customer data is in principle not to be stored in repositories; where necessary in individual cases, technical content, issues or project information may be affected. | USA |
| Canva Pty Ltd | 110 Kippax St. Surry Hills, NSW 2010, Australia | Design, presentations, marketing material, document design | Names, email addresses, design data, uploaded images, document contents | USA; where applicable processing by Canva group companies and service providers worldwide in accordance with the Canva data protection and contract documents. |
| Sendinblue SAS | 17 rue de Salneuve, 75017 Paris, France | Email marketing, transactional emails, newsletter, CRM-related communication | Email addresses, names, communication data, tracking data, campaign data | Germany, France, Belgium |
| Mollie B.V. | Keizersgracht 126, 1015 CW Amsterdam, Netherlands | Payment processing | Payment data, names, contact data, invoice data, transaction data | Netherlands |
| Syncron Sweden AB / EazyStock | Östra Järnvägsgatan 27, SE-111 20 Stockholm, Sweden | Provision and operation of the EazyStock software, import and processing of ERP/inventory/transaction data | Business and contact data, ERP data, article, supplier, customer, stock, order and transaction data | Processing location depending on the agreed EazyStock hosting location per the EazyStock DPA or order form. Under the EazyStock contract documents, Systempilot may itself be involved as a partner/sub-processor for support and implementation services in EazyStock projects. |