Updated at: 30 October 2026
This list distinguishes providers that process Customer Personal Data on Archivian's behalf from independent services. For more information about security practices with these providers, see Security Measures. Questions about this list can be sent to [email protected].
Current subprocessors and service providers
| Provider | Purpose | Data | Location / Transfer | Transfer Mechanism | Details |
|---|---|---|---|---|---|
| OVHcloud / HEBERGEMENT OVH INC. Name: OVH SAS Address: 2 rue Kellermann, 59100 Roubaix, France Contact: [email protected] Role: Processor | Cloud infrastructure, managed Kubernetes, networking and object storage | Service traffic and application data handled by hosted workloads | Germany | EU Standard Contractual Clauses where required. Germany for primary infrastructure and object storage; account/contract administration through OVHcloud Canada, with limited international processing as permitted under OVHcloud’s contractual framework |
|
| PostHog Name: PotHog Inc. Address: 2261 Market St., #4008, San Francisco, CA 94114, USA Contact: [email protected] Role: Processor | Product analytics and usage monitoring | Usage/events data, IP addresses, unique user identifiers and other analytics properties configured by Archivian | Germany / EU primary storage; ancillary processing may occur outside the EEA, including the United States | EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses |
|
| Sentry Name: Functional Software, Inc. dba Sentry Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA Contact: [email protected] Role: Processor | Application monitoring, error tracking and diagnostics | Error/event data, technical metadata, IP addresses and other identifiers contained in diagnostic events | United States | EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Postmark Name: AC PM LLC Address: 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA Contact: [email protected] Role: Processor | Opt-in transactional email delivery and related message processing | Recipient email addresses, email metadata and message content; potentially additional information contained in emails | United States | EU-U.S. Data Privacy Framework; Standard Contractual Clauses where applicable |
|
| Cloudflare Name: Cloudflare, Inc. Address: 101 Townsend Street, San Francisco, CA 94107, USA Contact: [email protected] Role: Processor | DNS, reverse proxy/CDN, DDoS protection, traffic optimization, and application security | IP addresses, request/network metadata, URLs, headers and content transmitted through or cached by Cloudflare | Global Cloudflare network; processing may occur outside the EEA, including the United States | EU-US Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Hetzner Name: Hetzner Online GmbH Address: Industriestr. 25, 91710 Gunzenhausen, Germany Contact: [email protected] Role: Processor | VPS hosting for the forward proxy used for security and moderation-related retrieval of externally supplied URLs, and for our self-hosted Umami web analytics (Nuremberg) | Destination URLs and transient network/request data; externally retrieved content may transit the proxy. Umami: pageview data (filtered page path, referrer origin, browser, device, language, country) and IP addresses in short-lived web server access logs | Germany | Not applicable — processing within the EEA |
|
| MongoDB Name: MongoDB, Inc. Address: 1633 Broadway, 38th Floor, New York, NY 10019, USA Contact: [email protected] Role: Processor | Managed database hosting | Account, Discord, message, moderation, configuration, and operational records | Frankfurt, Germany (Azure) | EU-US Data Privacy Framework where applicable; EU Standard Contractual Clauses for other restricted transfers |
|
| DigitalOcean Name: DigitalOcean, LLC Address: 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA Contact: [email protected] Role: Processor | Managed database hosting | Account, Discord, audits, moderation, configuration, and operational records | Germany (primary data residency); DigitalOcean subprocessors may process data in the United States for infrastructure, backup, security, and support services. | EU-US Data Privacy Framework; EU Standard Contractual Clauses where applicable |
|
| Fibery.com Name: Fibery Ltd Address: 28 Oktovriou, 2, Flat/Office 101, Egkomi, Makedonitissa, 2414 Nicosia, Cyprus Contact: [email protected] Role: Processor | Embedded form hosting, form submission processing, and workflow management | Discord user IDs, Discord server IDs when forms are used in the Guild Dashboard, and content submitted through forms | Germany (primary data residency); limited ancillary processing may occur outside the EEA, including the United States | EU Standard Contractual Clauses where required |
|
| Stripe Name: Stripe Payments Europe, Limited Address: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Contact: [email protected] Role: Independent controller for merchant-of-record transactions (Stripe Managed Payments) | Website payment processing, subscription billing, customer portal, and merchant-of-record services; the seller is identified at checkout, with Stripe acting as a separate controller for merchant-of-record transactions | Purchaser identity, billing and tax data, payment credentials, fraud signals, invoices, and subscription status | International processing by Stripe entities and service providers, including the United States and other countries outside the EEA | Adequacy decisions where applicable; Standard Contractual Clauses and appropriate safeguards for other restricted transfers |
|
Independent platform and in-Discord payment provider
Discord supplies the platform, accounts, APIs, and user content with which Archivian interoperates. Discord is not automatically classified as Archivian's subprocessor: it generally operates its own platform under its own terms.
For Archivian purchases made through Discord's Premium Apps checkout, Discord also acts as reseller and merchant of record under its Monetization Terms for EU- and UK-based developers. Discord is an independent controller for its payment and transaction processing under its Privacy Policy, including billing, payment credentials, tax, receipts, fraud prevention, and refunds. Archivian receives the purchaser's Discord user ID, server ID, product/plan, entitlement and subscription identifiers, status, billing period, and cancellation state to grant and manage paid access and provide support. This payment processing is outside Archivian's processing of Customer Personal Data under the DPA. Discord's Privacy Policy identifies Discord Netherlands BV as controller for EEA users and Discord Inc. for other users. Discord's Privacy Policy explains its international processing and transfer safeguards.
When Archivian retrieves an externally supplied URL for security or moderation checks (for example, a link sent in a message), the destination service receives that request as an independent recipient, not as Archivian's subprocessor. The exact data-flow roles should be confirmed by counsel.
Changes
Customers using the DPA will receive the advance notice and objection opportunity stated there before a new subprocessor handles Customer Personal Data. The operational notice mechanism and notice period must be selected before the DPA is offered.