Subprocessors
The third parties that help us deliver the Bildstak platform.
Last updated: August 2026
How Bildstak is hosted depends on the deployment a customer chooses, and so does this list. For self-hosted and on-premises deployments — including air-gapped installations — the platform runs entirely on the customer's own infrastructure and there are no subprocessors in the run-time data path at all. For cloud deployments, infrastructure is provisioned per customer with a cloud hosting provider in the region the customer selects; the specific provider and region for a given deployment are identified in that customer's agreement and available on request. The table below lists the categories of subprocessor that may process personal data on our behalf for cloud deployments.
| Subprocessor | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Hosting and storage for the platform and Customer Data | Provider and region selected per deployment — named in the customer's agreement |
| Email delivery provider | Transactional and account email (notifications, verification, support) | EU or customer-selected region |
| Error monitoring provider | Application error and performance monitoring to maintain reliability | EU or customer-selected region |
| Payment processor | Processing of subscription payments and billing for paid plans | Billing data only — no project data |
How we manage subprocessors
Before engaging a subprocessor, we assess its security and privacy practices and ensure it is bound by a contract requiring it to protect personal data consistent with our commitments, to process data only to provide services to us, and to maintain appropriate technical and organizational measures.
We limit each subprocessor's access to the minimum necessary to perform its function, and we remain responsible to our customers for the performance of our subprocessors.
Notification of changes
We may add to or replace subprocessors as our service evolves. When we intend to make a material change, we will update this page and, where required by our agreements or applicable law, provide advance notice so that affected customers have the opportunity to review and object on reasonable data-protection grounds.
Customers may subscribe to receive notice of subprocessor changes through the mechanism described in our Data Processing Addendum.
Self-hosted deployments
Customers who deploy Bildstak in a self-hosted or on-premises environment operate the platform within infrastructure they control. In those deployments, project data does not flow through Bildstak's cloud subprocessors, and the customer determines which, if any, third-party services are involved.
Contact
Questions about our subprocessors or this page can be directed to [email protected].
This page is a general summary provided for convenience and does not constitute legal advice; please direct any questions to [email protected].
For questions, contact us.