Reditus Sub-processors
Last updated: 4 August 2026.
This page lists the sub-processors Reditus B.V. (Kapelweg 12, 3951 AC Maarn, Netherlands, KvK 77814487) engages to process customer personal data, as referenced in clause 9 and Annex C of our Data Processing Agreement. We give at least 30 days' notice before a new sub-processor begins processing customer personal data, and customers may object as described in the DPA. To receive change notifications by email, write to privacy@getreditus.com with the subject "Sub-processor notifications".
Sub-processors of Customer Personal Data, as maintained at https://www.getreditus.com/sub-processors.
| Name (legal entity) | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the application, API and supporting infrastructure | Nuremberg, Germany | None (EEA) |
| Supabase Pte. Ltd | Primary database, authentication and file storage | Frankfurt, Germany (Singapore contracting entity) | SCCs, Module Three (no Singapore adequacy decision; data rests in the EU) |
| Cloudflare, Inc. | DNS, CDN, TLS termination and edge compute | Global edge network; TLS terminates at the point of presence nearest the visitor | SCCs, Module Three; EU-US Data Privacy Framework self-certification as a supplementary fact |
| Stripe Payments Europe, Limited | Payment processing and, where the Customer connects its Stripe account, reading transaction data to attribute commissions | European Economic Area | None (EEA) at the top level |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Affiliate commission payouts, the default payout rail | European Economic Area | None (EEA) |
| Wise Europe SA | SEPA and IBAN affiliate payouts, on request | European Economic Area | None (EEA) |
| Twilio Inc., trading as Twilio SendGrid | Transactional email sent by the Services | United States | SCCs, Module Three |
| Functional Software, Inc., doing business as Sentry | Application error tracking and diagnostics, including session replay on the authenticated application | United States (Sentry US region) | SCCs, Module Three; EU-US Data Privacy Framework self-certification as a supplementary fact |
| PostHog, Inc. | Product and website analytics, including session replay on the authenticated application | Frankfurt, Germany, at rest; United States contracting entity | SCCs, Module Three (data rests in the EU; US contracting entity) |
| Honeybadger Industries LLC | Backend error tracking, performance monitoring and application logging | United States | SCCs, Module Three |
| Plane Software, Inc. | Issue tracking (hosted cloud service); tickets created from error reports can inherit personal data from the error payload | United States (hosted on Amazon Web Services) | SCCs, Module Three |
| CORDNET OU, trading as Featurebase | In-product support chat and product feedback | Netherlands, Germany and Ireland | None (EEA) at the top level |
Notes:
1. Integrations the Customer connects are not Reditus Sub-processors. Where the Customer connects its own HubSpot, Slack, Calendly or other account, or its own systems via the Reditus API and webhooks, that vendor is the Customer's processor: Reditus sends the data to the Customer's own account with a vendor the Customer chose.
2. Google Ads and LinkedIn are independent controllers, running on Reditus's own web properties for Reditus's own marketing; they are disclosed in the Reditus privacy notice, not here.
3. Corporate vendors that never touch Customer Personal Data (Reditus's own CRM, workspace and similar tooling, for which Reditus is the controller) are listed for transparency on the sub-processor page, not in this Annex.
*End of the Reditus Data Processing Agreement, version 1.0 (concise edition), effective 4 August 2026. Reditus B.V., Kapelweg 12, 3951 AC Maarn, Netherlands, KvK 77814487, VAT NL861156420B01.*
Questions about this list: privacy@getreditus.com. Our security overview is at /security once published, and our Data Processing Agreement is at /dpa.