Subprocessors
The outside companies that process personal data for ScaleUp2Sell, what for, and where.
Last updated: 26 October 2026
The website, its database and the automations we host for clients run on our own servers in Rīga, Latvia (Unijas iela 8c). We use the companies below for specific tasks. Each processes personal data only on our instructions, under a data processing agreement (Art. 28 GDPR), and with the safeguards listed for any transfer outside the EU/EEA.
| Company and service | What for | Data | Where |
|---|---|---|---|
| Microsoft Ireland Operations Ltd Microsoft 365 (Exchange Online) | Sending and receiving our email, including sign-up codes, notifications and the emails of automations we run | Email addresses, names, email content | EU (Microsoft EU Data Boundary) Data processing agreement; EU Standard Contractual Clauses and the EU-US Data Privacy Framework for any transfer |
| Anthropic, PBC Claude API | The AI model behind our AI assistants and the automations we build | Text sent to the AI: requests and design instructions with names and contact details replaced by placeholders where possible; in client automations, the emails the automation handles | United States Data processing agreement with EU Standard Contractual Clauses; not used to train models; deleted by Anthropic within 30 days |
| Cloudflare, Inc. DNS, HTTPS and network protection (Cloudflare Tunnel) | Delivering the website securely and protecting it against attacks | IP addresses and the technical data of each request to the website | Worldwide network, company in the United States Data processing agreement; EU-US Data Privacy Framework and EU Standard Contractual Clauses |
| MongoDB, Inc. MongoDB Atlas | Database of the automations and dashboards we run for clients Client automations we host | Data the automation works with, such as emails, orders and dashboard users | EU (Stockholm, Sweden) Data processing agreement; data stored in the EU |
| Hostinger International Ltd Web hosting | Hosting a client's automation on the web, when the client chooses web hosting instead of our servers Only for clients who choose web hosting | Data the automation works with | EU data centre Data processing agreement; data stored in the EU |
| Tailscale Inc. Encrypted remote access | Secure administration of our own servers | Technical connection data of our own devices only; no content passes through Tailscale | United States Data processing agreement; EU-US Data Privacy Framework and EU Standard Contractual Clauses |
Changes
When we add or replace a subprocessor, we update this page first. Clients with a data processing agreement are told by email at least 14 days in advance and can object. Questions: [email protected]. How we handle personal data overall is in our Privacy Policy.