Sub-processors

Last updated: October 20, 2025

🇪🇺 European sub-processors

Phare prioritizes European companies that use European hosting whenever possible, this is to ensure:

• Better Privacy: GDPR compliance isn't just a checkbox, it's baked in
• Supporting Local: Keep the digital economy thriving in Europe
• Faster Service: Lower latency for Phare's mostly European users

When Phare absolutely must use non-European providers, Phare ensures they meet the highest security standards and host data in European datacenters wherever possible. For some services like payments and telecommunications, global data residency is necessary by design.

🇸🇮 Bunny

• Address: BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia
• Usage: CDN, DNS, WAF, and hosting Phare's monitoring agents across multiple regions
• Data location: 🌍 119 edge locations across the world
• Certifications: ISO 27001

🇩🇪 Hetzner

• Address: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
• Usage: Main application and database hosting
• Data location: 🇩🇪 Germany
• Certifications: ISO 27001:2017

🇫🇷 Scaleway

• Address: Scaleway SAS, 8 rue de la ville l'eveque, 75008 Paris, France
• Usage: Encrypted backup storage and transactional emails
• Data location: 🇫🇷 France
• Certifications: ISO 27001:2022

🇫🇷 Brevo

• Address: Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France
• Usage: Newsletter and onboarding delivery (only if you subscribe!) + failover transactional emails
• Data location: 🇪🇺 European union
• Certifications: ISO 27001:2013

🇫🇷 Mistral AI

Personal data are removed from the payload sent to Mistral AI, this process is described in the privacy section of the Incident AI documentation.

• Address: Mistral AI SAS, 15 rue des Halles, 75001 Paris, France
• Usage: AI-generated incident summary and post-mortem
• Data location: 🇪🇺 European Union
• Certifications: ISO 27001:2022 + SOC 2

🇳🇱 Lettermint

• Address: Lettermint V.O.F., Willemsvaart 16 B, 8019 AB Zwolle, Netherlands
• Usage: Failover transactional emails
• Data location: 🇪🇺 European Union

🇦🇹 Vemetric

Your IP is anonymized with a Bunny proxy before analytics events are sent to Vemetric. Usage data is aggregated at the organization level without distinction between the individual team members of an organization.

• Address: Seriouscode GmbH, Siedlungsgasse 16, A-2111 Kleinrötz, Austria
• Usage: Product and website analytics
• Data location: 🇪🇺 European Union

🇮🇪 Paddle

Paddle is a trusted merchant of record with a proven track record of security and reliability. You will have to share your payment information with Paddle to subscribe to a Phare Scale plan.

Paddle Ireland (Paddle Payments Ltd.) processes payments for customers based in Europe.

• Address: Paddle Payments Ltd., The Academy, 42 Pearse Street, Dublin, D02 YX88, Ireland
• Usage: Payment processing, subscriptions, and invoicing
• Data location: 🌍 Global
• Certifications: PCI DSS v4.0.0 + SOC 2 Type II

🇬🇧󠁧󠁢󠁥󠁮󠁧 Infobip

• Address: Infobip Ltd, 181 Queen Victoria Street, London EC4V 4EG, England
• Usage: SMS and voice notifications
• Data location: 🌍 Global
• Certifications: ISO 27001:2022

🌍 Non-European sub-processors

🇺🇸 Paddle

Paddle US (Paddle.com Inc.) only processes payments for customers based outside of Europe.

• Address: Paddle.com Inc, 3811 Ditmars Blvd #1071, New York, 11105-1803, Astoria, United States
• Usage: Payment processing, subscriptions, and invoicing
• Data location: 🌍 Global
• Certifications: PCI DSS v4.0.0 + SOC 2 Type II

🇺🇸 Sentry

Error tracking is configured to not process any personal data, but it can't be guaranteed that an error stack trace won't ever contain any personal information.

• Address: Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, United States of America
• Usage: Error tracking and performance monitoring
• Data location: 🇩🇪 Germany
• Certifications: ISO 27001:2022

How Phare Protects Your Data

Phare tries to minimize the number of sub-processors to the absolute minimum required to provide a reliable platform. Personal data is only transferred when absolutely necessary to provide the service, giving you as much control as possible over your data.

When Things Change

If Phare needs to add, remove, or change any sub-processors, you'll get 30 days advance notice via email. Don't like a new partner? You can object or close your account, no hard feelings!

Questions?

If you have any questions or concerns about Phare's sub-processors, please don't hesitate to reach out.

Send an email to support@phare.io, or check out the contact page for more options.