Sub-processors
Who elsehandles your data.
Every company that touches your organisation’s data for us, what for, and what it sees. We tell every admin at least 30 days before adding one, so you can object.
- Neon
- The database Snowleaf runs on
- Everything in your organisation, encryptedFrankfurt, Germany, with its backups.
- Hetzner
- The server that runs Snowleaf’s application
- Everything in your organisation while it’s being processed, encrypted in transitGermany.
- Cloudflare
- Serving the website and app, and storing the files you upload (R2)
- Every request to the site and app, and uploaded readings files and verification documentsFiles are kept in R2’s EU region and encrypted at rest.
- Mailtrap (Railsware)
- Sending email
- Names and email addresses, and what each email says: sign-in links, alerts, invoices
- Bachs
- Taking payments
- The payer’s email address and the invoice amountCard and bank details go to Bachs directly; we never see them.
- Anthropic
- The assistant, on Report and up, only when someone uses it
- Column headings and a few rows of a file being mapped, figures already calculated for a summary, and the questions askedNever readings in bulk, and never anything from organisations that don’t use the assistant.
- Signing in with Google, for those who choose it
- The person’s name and email address, from Google