Sub-processors

What this list is

Tech Box d.o.o. uses a small number of service providers to run TerenIQ. Where your company is the controller of workspace content and we act as its processor, these providers are our sub-processors under article 28 of the GDPR. This page is the current, complete list.

We tell workspace owners by email at least 30 days before adding or replacing a sub-processor that handles customer content, so there is time to object. If you object on reasonable data-protection grounds and we cannot offer an alternative, you may terminate the affected part of the service without penalty for the remainder of the paid period.

Infrastructure

Cloudflare, Inc. — application hosting, the API, the D1 database, R2 file storage, DNS and DDoS protection. Processes all workspace content and account data. Our D1 database and R2 bucket are provisioned in the European Union.

Mobile platforms and delivery

Apple Inc. — App Store distribution, App Store purchases for iPhone subscriptions, and Apple Push Notification service. Processes purchase and subscription identifiers and push tokens.

Google Ireland Limited (Firebase Cloud Messaging) — push notification delivery to Android devices. Processes push tokens and a per-installation identifier.

Maps and email

Mapbox, Inc. — renders maps and location pins when you open a mapping feature. May receive device, network and location information at that moment.

Resend (Plus Five Five, Inc.) — transactional email: invitations, password resets, account and billing notices. Processes recipient name and email address and the message content.

Transfers outside the EEA

Cloudflare, Apple, Mapbox and Resend are established in the United States. Where personal data is transferred outside the European Economic Area, we rely on the European Commission's standard contractual clauses together with the transfer terms in each provider's own data processing agreement, and on any applicable adequacy decision.

Our own storage is provisioned inside the European Union, so workspace content and attachments are held in the EU. Transfers arise where a provider's support or delivery functions are operated from elsewhere.

Questions

Write to [email protected]. If you need our data processing agreement, it is published at tereniq.com/dpa.html.