Data processing supply chain
Subprocessor register
Providers with a role in delivering Lyniti are listed with purpose, customer-data scope, region position, transfer basis, and provider data-processing terms.
Last reviewed22 August 2026
| Provider | Role | Data processed | Region | Transfer position | Terms |
|---|---|---|---|---|---|
Hetzner Online GmbH | Core compute and hosting infrastructure | Application traffic, customer content, service logs, and encrypted service data hosted on Lyniti deployments | Falkenstein, Germany - Core compute; Nuremberg, Germany - Secondary | EU processing under provider DPA | Provider DPA |
Cloudflare, Inc. | CDN, network-edge services, and R2 object storage | Request metadata, IP and security signals, cached delivery data, object metadata, and file ciphertext encrypted by Lyniti with AES-256-GCM before R2 storage | Global network edge; R2 data location Eastern Europe (EEUR) | Cloudflare DPA and applicable transfer safeguards | Provider DPA |
Plus Five Five, Inc. (Resend) | Transactional email delivery | Recipient address, message content, delivery metadata, and attachments when included in an email | Ireland (eu-west-1) | Provider DPA includes EU Standard Contractual Clauses | Provider DPA |
Stripe | Payment processing, subscriptions, invoices, and billing events | Billing contacts, customer and subscription identifiers, payment and invoice records; Lyniti does not store full card numbers | EEA, United States, and other service locations described by Stripe | Stripe DPA and Data Transfers Addendum | Provider DPA |
Lyniti-operated PostgreSQL | Primary structured application database | Account, workspace, collaboration, business, billing-reference, permission, and audit records | Falkenstein, Germany | No separate SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Lyniti-operated Redis | Cache, session state, coordination, and realtime support | Short-lived cached application data, authorization snapshots, session and realtime coordination records | Falkenstein, Germany | No separate SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Custom Analytics Solutions | Custom privacy-focused service and website analytics solution | Page, feature, performance, and event metadata where configured and permitted by consent settings | Nuremberg, Germany | No separate analytics SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Changes and objections
Lyniti may update this register when a provider, purpose, or processing location changes. Where Lyniti relies on a controller's general written authorization, Lyniti provides advance notice of any intended addition or replacement of a Subprocessor before that Subprocessor begins processing Customer Personal Data.
Customer may object on reasonable data-protection grounds within the period specified in the notice. The applicable signed DPA controls the objection procedure and its consequences.