Sub-processors
Binary Black uses the providers below to operate OTA-Pulse. This is the list referred to in Annex III of our Data Processing Agreement and in section 13 of our Privacy Policy; all three are generated from the same source and cannot differ. Last updated: 2026-10-03.
Sub-processors for Customer Personal Data
These providers process personal data that our customers collect and manage through the Services (device telemetry, user accounts, remote-access metadata), on our behalf and under the DPA. Customer Personal Data is processed in the European Union/EEA unless the location column states otherwise.
| Sub-processor | Purpose | Data categories | Location / transfer mechanism | Role |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting and infrastructure of the OTA-Pulse Cloud | All Customer Personal Data | EU; data centre: Falkenstein, Germany — No third-country transfer | Sub-processor (Customer Personal Data) |
| Cloudflare, Inc. | DNS and delivery of website and documentation | Website visitors' connection data; console or API traffic only where a deployment is routed through Cloudflare | Global edge network; USA parent — EU-US Data Privacy Framework and/or standard contractual clauses | Sub-processor (Customer Personal Data) |
| Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (SES) | Transactional email delivery (verification, password reset, security notices) | Email addresses of users; message content | AWS region us-east-1 (US East, N. Virginia) — Transfer to the USA; EU-US Data Privacy Framework and/or standard contractual clauses | Sub-processor (Customer Personal Data) |
| PagerDuty, Inc. | Paging for break-glass remote-access alerts | Event type, organisation, session and device identifiers, acting user ID and email | USA — Standard contractual clauses | Sub-processor (Customer Personal Data) |
Grafana, the object storage for recordings and the databases are operated by us on the hosting infrastructure and are not separate sub-processors.
Providers for our own website and controller data
These providers handle data for which we are the controller (website visits, contact enquiries, billing) or act under their own responsibility. They are not sub-processors for Customer Personal Data. Details are in the Privacy Policy.
| Provider | Purpose | Data categories | Location / transfer mechanism | Role |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Payment processing and billing | Billing contact, payment and subscription data | Ireland / USA — EU-US Data Privacy Framework and/or standard contractual clauses | Processor / independent controller (per Stripe's terms) |
| Formspree, Inc. | Contact form | Name, email, company, message | USA — Standard contractual clauses | Processor for our own data |
| Plausible Insights OÜ | Cookie-less web analytics | Aggregated page-view data; IP address not stored | Estonia / EU — No third-country transfer | Processor for our own data |
| Google Ireland Limited / Google LLC | Optional Sign-In with Google (independent controller) | Email address, name, profile data | Ireland / USA — EU-US Data Privacy Framework | Independent controller |
Changes
We inform customers of any intended addition or replacement of a sub-processor at least 30 days in advance, in text form (for example by email to the account owner or by notice in the console), and update this page. A customer may object on reasonable data-protection grounds within 30 days of the notice; the procedure and the consequences are set out in section 7 of the DPA.
To be notified directly, email binaryblack21@gmail.com with the address that should receive notices. To object to a change, email binaryblack21@gmail.com within the notice period.
Last updated: 2026-10-03.