Updated at: 25 September 2026
This list distinguishes providers that process Customer Personal Data on Archivian's behalf from independent services. For more information about security practices with these providers, see Security Measures. Questions about this list can be sent to [email protected].
Current subprocessors and service providers
| Provider | Purpose | Data | Location / Transfer | Transfer Mechanism | Details |
|---|---|---|---|---|---|
| OVHcloud / HEBERGEMENT OVH INC. Name: OVH SAS Address: 2 rue Kellermann, 59100 Roubaix, France Contact: [email protected] Role: Processor | Cloud infrastructure, managed Kubernetes, networking and object storage | Service traffic and application data handled by hosted workloads | Germany | EU Standard Contractual Clauses where required. Germany for primary infrastructure and object storage; account/contract administration through OVHcloud Canada, with limited international processing as permitted under OVHcloud’s contractual framework |
|
| PostHog Name: PotHog Inc. Address: 2261 Market St., #4008, San Francisco, CA 94114, USA Contact: [email protected] Role: Processor | Product analytics and usage monitoring | Usage/events data, IP addresses, unique user identifiers and other analytics properties configured by Archivian | Germany / EU primary storage; ancillary processing may occur outside the EEA, including the United States | EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses |
|
| Sentry Name: Functional Software, Inc. dba Sentry Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA Contact: [email protected] Role: Processor | Application monitoring, error tracking and diagnostics | Error/event data, technical metadata, IP addresses and other identifiers contained in diagnostic events | United States | EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Postmark Name: AC PM LLC Address: 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA Contact: [email protected] Role: Processor | Opt-in transactional email delivery and related message processing | Recipient email addresses, email metadata and message content; potentially additional information contained in emails | United States | EU-U.S. Data Privacy Framework; Standard Contractual Clauses where applicable |
|
| Cloudflare Name: Cloudflare, Inc. Address: 101 Townsend Street, San Francisco, CA 94107, USA Contact: [email protected] Role: Processor | DNS, reverse proxy/CDN, DDoS protection, traffic optimization, and application security | IP addresses, request/network metadata, URLs, headers and content transmitted through or cached by Cloudflare | Global Cloudflare network; processing may occur outside the EEA, including the United States | EU-US Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Hetzner Name: Hetzner Online GmbH Address: Industriestr. 25, 91710 Gunzenhausen, Germany Contact: [email protected] Role: Processor | VPS hosting for the forward proxy used for security and moderation-related retrieval of externally supplied URLs | Destination URLs and transient network/request data; externally retrieved content may transit the proxy | Germany | Not applicable — processing within the EEA |
|
| MongoDB Name: MongoDB, Inc. Address: 1633 Broadway, 38th Floor, New York, NY 10019, USA Contact: [email protected] Role: Processor | Managed database hosting | Account, Discord, message, moderation, configuration, and operational records | Frankfurt, Germany (Azure) | EU-US Data Privacy Framework where applicable; EU Standard Contractual Clauses for other restricted transfers |
|
| DigitalOcean Name: DigitalOcean, LLC Address: 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA Contact: [email protected] Role: Processor | Managed database hosting | Account, Discord, audits, moderation, configuration, and operational records | Germany (primary data residency); DigitalOcean subprocessors may process data in the United States for infrastructure, backup, security, and support services. | EU-US Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Fibery.com Name: Fibery Ltd Address: 28 Oktovriou, 2, Flat/Office 101, Egkomi, Makedonitissa, 2414 Nicosia, Cyprus Contact: [email protected] Role: Processor | Embedded form hosting, form submission processing, and workflow management | Discord user IDs, Discord server IDs when forms are used in the Guild Dashboard, and content submitted through forms | Germany (primary data residency); limited ancillary processing may occur outside the EEA, including the United States | EU Standard Contractual Clauses where required |
|
| Paddle Name: Paddle.com Market Limited Address: 30 Old Bailey, London, EC4M 7AU, United Kingdom Contact: [email protected] Role: Independent controller for merchant-of-record transactions | Payment processing, subscription billing, and merchant-of-record services; the seller is identified at checkout, with Paddle acting as a separate controller for merchant-of-record transactions | Purchaser identity, billing and tax data, payment credentials, fraud signals, invoices, and subscription status | International processing by Paddle entities and service providers, including outside the UK/EEA | Adequacy decisions where applicable; Standard Contractual Clauses and appropriate safeguards for other restricted transfers |
|
Independent platform
Discord supplies the platform, accounts, APIs, and user content with which Archivian interoperates. Discord is not automatically classified as Archivian's subprocessor: it generally operates its own platform under its own terms. When Archivian retrieves an externally supplied URL for security or moderation checks (for example, a link sent in a message), the destination service receives that request as an independent recipient, not as Archivian's subprocessor. The exact data-flow roles should be confirmed by counsel.
Changes
Customers using the DPA will receive the advance notice and objection opportunity stated there before a new subprocessor handles Customer Personal Data. The operational notice mechanism and notice period must be selected before the DPA is offered.