Subprocessors

Last updated 20 August 2026.

Running Excubia means a handful of suppliers touch the data you put in. They act on our instruction, they may not use it for anything of their own, and each of them is bound by a data processing agreement with us.

This page is the list the data processing agreement refers to. It changes when a supplier is added or replaced, and we tell you before that happens.

Who they are

Hetzner Online GmbH, Gunzenhausen — hosting.

  • Scope: everything. Website, app, database, background jobs, and the files you attach to a task.
  • Location: Falkenstein, Germany. Object storage for attachments is in the same place.
  • Their own list: hetzner.com/legal/privacy-policy

AhaSend B.V., Amsterdam — sending email.

  • Scope: the recipient's address and name, and what the message is about — a task title, a project name, who did something. Never the contents of a comment.
  • Location: the EEA. Their own subprocessors are Hetzner (Germany, Finland), DA International Group (Bulgaria) and Blix Solutions (Norway). Their agreement offers US infrastructure as an option; we have not taken it.
  • Their own list: ahasend.com/dpa

Transfers

None. Nothing here rests on standard contractual clauses, an adequacy decision, or a framework that can be struck down.

What is not on this list

Dinero and Slack are not our subprocessors. They run on your own accounts under your own agreements with them. When you connect one, you are instructing us to send data there, and what happens at their end is between you and them. We list them here because you should know the data moves, not because we are the ones processing it.

Plausible counts visits on our public pages — the front page and these documents. They never touch anything you or your clients put into Excubia, so they are a supplier for our own visitor statistics rather than a processor of your data. No cookies. What they do see is in the privacy policy.

Changes

We tell you before a new supplier starts processing anything, and you have 30 days to object. If we cannot find a way around your objection, you can end the agreement for the part of the service it affects, and we will not charge you for the time you did not get.

The date at the top says when this page last changed. Every earlier version is kept in our source repository.