Legal
Subprocessors
Last updated: February 26, 2026
This page lists subprocessors engaged by Marmalade skies s.r.o. to provide the DocTracker service. Each subprocessor may process Customer Data in accordance with our Data Processing Agreement.
Vercel
- Service provided: Application hosting and infrastructure
- Data processed: Application data, uploaded documents, metadata
- Processing location: Germany (EU region)
- International transfer safeguard: Not applicable (EEA processing)
Neon
- Service provided: Managed PostgreSQL database hosting
- Data processed: Stored customer data and metadata
- Processing location: European Union (AWS eu-central-1 - Frankfurt)
- International transfer safeguard: Not applicable (EEA processing)
Cloudflare, Inc.
- Service provided: Object storage (Cloudflare R2) for uploaded documents
- Data processed: Uploaded documents and file metadata
- Processing location: European Union (EU jurisdiction)
- International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards as provided by the subprocessor
Google LLC
- Service provided: Google Drive API and external storage integration (user-connected storage)
- Data processed: Files uploaded by users, file metadata, and integration authorization tokens (OAuth tokens)
- Processing location: United States and/or European Union (depending on Google infrastructure)
- International transfer safeguard: Standard Contractual Clauses and/or adequacy mechanisms as provided by Google
Resend
- Service provided: Transactional email delivery
- Data processed: Email addresses, notification content
- Processing location: United States (where applicable)
- International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards as provided by the subprocessor
Stripe
- Service provided: Subscription billing and payment processing
- Data processed: Billing identifiers, payment status, subscription information
- Processing location: United States and/or European Union
- International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards as provided by the subprocessor
Upstash
- Service provided: Rate limiting and caching infrastructure (Redis)
- Data processed: IP addresses and technical request identifiers used solely for abuse prevention and rate limiting
- Processing location: Germany (Frankfurt, EU region - eu-central-1)
- International transfer safeguard: Not applicable (EEA processing)
We may update this list from time to time. Where required under our Data Processing Agreement, we will notify Controllers of material changes to our subprocessors.