Sub-processor list

As of: 28.04.2026

This English text is a convenience translation. The legally binding version is the German UAV-Liste; in case of discrepancies, the German version prevails.

This sub-processor list ("sub-processor list") contains the sub-processors used by Systempilot within the meaning of the DPA. It is part of the DPA insofar as reference is made to this list there. Changes are communicated in accordance with the provisions of the DPA.

Data protection contact: privacy@systempilot.net

ProviderAddress / contracting partyPurpose / serviceCategories of personal dataProcessing location / data centre
Hetzner Online GmbHIndustriestr. 25, 91710 Gunzenhausen, GermanyHosting, server infrastructure, cloud and server operationDepending on the project: business and contact data, system data, application data, technical logsGermany / Finland, depending on the product and location used. Systempilot usually relies on locations in Nuremberg or Falkenstein (both Germany).
IP-Projects GmbH & Co. KGAm Vogelherd 14, 97295 Waldbrunn, GermanyHosting, server operation, domains, technical infrastructureBusiness and contact data, technical data, hosting/system dataFrankfurt metropolitan area, Germany
Zoho Corporation GmbHTrinkausstr. 7, 40213 Düsseldorf, GermanyCRM, support, project management, email, file storage, appointment booking, invoicing, password management and related Zoho servicesBusiness and contact data, communication data, project and support data, invoice data, system and usage dataAmsterdam, Netherlands or Dublin, Ireland.
Google Ireland Limited / Google LLCGordon House, Barrow Street, Dublin 4, Ireland or Google LLC, USAGoogle Workspace, in particular Google Calendar, and where applicable documents, email, video conferencing or file storageBusiness and contact data, calendar data, communication data, document contents, technical usage dataEU/EEA, in particular Ireland, Netherlands, Finland, Denmark and Belgium, depending on the respective Google service and the tenant/service configuration.
Microsoft Ireland Operations Limited / Microsoft CorporationOne Microsoft Place, South County Business Park, Leopardstown, Dublin 18, IrelandMicrosoft Teams, and where applicable Outlook, Office documents, Azure servicesBusiness and contact data, communication data, meeting data, document contents, technical usage dataDepending on the Microsoft service used and tenant configuration; typically EU/EEA with the corresponding configuration, otherwise per the Microsoft DPA and EU Data Boundary provisions.
Zoom Communications, Inc.55 Almaden Blvd, 6th Floor, San Jose, CA 95113, USAVideo conferencing, online meetings, recordings/transcripts, communication with customers and project participantsBusiness and contact data, meeting metadata, audio/video data, chat content, where applicable shared screen content, recordings and transcriptsGermany/EU where configured accordingly, in particular for recordings, transcripts and selected real-time data; otherwise, where applicable, third-country processing in accordance with the Zoom contract documents
tl;dv / tldx Solutions GmbHAachen, GermanyMeeting recording, transcription, summary and project documentationNames, email addresses, meeting audio, video, transcripts, chat/meeting metadataEurope, or via Mistral AI for AI functions
Mistral AIMistral AI SAS, Paris, FranceAI processing, summarisation, analysis and processing of text content, in particular meeting transcripts, support texts or technical contentDepending on use: meeting transcripts, support texts, technical content, document contentsEU/EEA, according to the provider in particular France/Sweden, depending on the chosen service.
Functional Software, Inc. (d/b/a Sentry)45 Fremont Street, 8th Floor, San Francisco, CA 94105, USAError analysis, monitoring, application performance monitoringTechnical error and diagnostic data; customer data is, where possible, not transferred to logs or only in minimised form.Iowa, USA
Cloudflare, Inc.101 Townsend St, San Francisco, CA 94107, USADNS, CDN, DDoS protection, web application firewall, performance and security servicesIP addresses, request data, technical connection data, log dataGlobal network; processing of technical connection data depending on the location of the accessing user and Cloudflare's infrastructure. Third-country transfers occur in accordance with the Cloudflare data protection terms and appropriate safeguards.
HostProfis (3CX)Hans-Sittenberger-Str. 13, 9500 Villach, AustriaPhone system, VoIP, communicationContact data, phone numbers, call metadata, where applicable voicemail/call recordings, technical logsAustria (Vienna, Graz, Linz, Salzburg, Innsbruck, Villach)
GitHub, Inc.88 Colin P. Kelly Jr. Street, San Francisco, California, USASource code management, issues, technical documentation, deployment/development processesCustomer data is in principle not to be stored in repositories; where necessary in individual cases, technical content, issues or project information may be affected.USA
Canva Pty Ltd110 Kippax St. Surry Hills, NSW 2010, AustraliaDesign, presentations, marketing material, document designNames, email addresses, design data, uploaded images, document contentsUSA; where applicable processing by Canva group companies and service providers worldwide in accordance with the Canva data protection and contract documents.
Sendinblue SAS17 rue de Salneuve, 75017 Paris, FranceEmail marketing, transactional emails, newsletter, CRM-related communicationEmail addresses, names, communication data, tracking data, campaign dataGermany, France, Belgium
Mollie B.V.Keizersgracht 126, 1015 CW Amsterdam, NetherlandsPayment processingPayment data, names, contact data, invoice data, transaction dataNetherlands
Syncron Sweden AB / EazyStockÖstra Järnvägsgatan 27, SE-111 20 Stockholm, SwedenProvision and operation of the EazyStock software, import and processing of ERP/inventory/transaction dataBusiness and contact data, ERP data, article, supplier, customer, stock, order and transaction dataProcessing location depending on the agreed EazyStock hosting location per the EazyStock DPA or order form. Under the EazyStock contract documents, Systempilot may itself be involved as a partner/sub-processor for support and implementation services in EazyStock projects.