Draft for legal review — this document has not been reviewed by a licensed attorney. Do not treat it as final legal advice.

Subprocessors

Last updated: 2026-07-03

This page lists the third-party sub-processors Emit Vision uses to provide the Service. A sub-processor is a vendor who processes personal data on our behalf (i.e., on behalf of our customers’ data). We will update this list before adding new sub-processors that process customer data.

Third-party infrastructure and backups

VendorLocationPurposeData categoriesDPA link
Hetzner Online GmbHGermany (Nuremberg)Cloud compute, networking, and VPS hostingAll data in transit and at restPrivacy Policy (DPA included)
Cloudflare R2United StatesEncrypted backups for PostgreSQL databasesEncrypted account and billing metadataDPA
Cloudflare, Inc.United StatesDNS, CDN, TLS termination, edge networkProxied HTTP(S) trafficDPA

Infrastructure we operate

The following infrastructure components run on our own servers (Hetzner VPS) and are not third-party sub-processors. These systems remain under our direct control and are not subject to separate subprocessor agreements:

  • PostgreSQL database: Account, organization, and billing metadata
  • ClickHouse: Customer telemetry event storage and querying
  • Redis: Background job queue for event ingestion and alerts, and rate-limit state

Email delivery

VendorLocationPurposeData categoriesDPA link
Resend, Inc.United StatesTransactional email deliveryAccount email addresses, message content, invite tokens, password reset links, quota warnings, digest contentDPA

Monitoring

VendorLocationPurposeData categoriesDPA link
healthchecks.io (SIA Monkey See Monkey Do)Latvia (EU)Dead-man's-switch uptime monitoringNo personal data — heartbeat pings onlyNo DPA required

Payments

VendorLocationPurposeData categoriesDPA link
Stripe, Inc.United StatesSubscription billing and payment processingBilling contact name and email (card data never touches Emit Vision servers)DPA

Changes to this list

We will notify organization owners by email at least 30 days before a new sub-processor begins processing personal data. If you object to the addition of a new sub-processor, you may terminate your subscription within that 30-day window per our Terms of Service. For questions about our sub-processors, contact us at [email protected].