Subprocessors
Last updated: 27.07.2026
This page lists the service providers ONETEEM uses to deliver its services, what each one is used for, where it processes data, and the legal mechanism covering any transfer outside the European Economic Area. It is referenced by our privacy policy, our security page and our data processing agreement, and it sits alongside them in our trust centre.
We notify customers at least 30 days before adding or replacing a subprocessor that handles personal data, so there is time to object. Every subprocessor goes through a security and privacy review before engagement and is contractually bound to confidentiality, minimum security standards, and processing only on our instructions. Each one receives only the data needed to perform its part of the service.
Current subprocessors
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| IONOS SE | Web hosting and DNS | Germany | Not applicable, processing in the EU |
| Cloudflare, Inc. | Content delivery, DDoS protection and edge security | Global edge network, company based in the United States | EU US Data Privacy Framework, with standard contractual clauses as fallback |
| Google Ireland Limited and Google LLC | Google Workspace, being email, documents and calendar | European Union, with support access from the United States | EU US Data Privacy Framework |
| Atlassian Pty Ltd and Atlassian, Inc. | Atlassian Cloud on AWS, being our Jira, Confluence and Jira Service Management instances | See the Atlassian trust centre for the regions applicable to our instances, with support access from outside the EEA | EU US Data Privacy Framework and standard contractual clauses |
| Odoo S.A. | Website, CRM and business operations | Belgium | Not applicable, processing in the EU |
| Finom | Business banking and payment processing | Netherlands | Not applicable, processing in the EU |
| Anthropic PBC | AI assisted software development, being code review, testing and security hardening | United States | Standard contractual clauses |
| ONETEEM TUNISIA SUARL | Software development and delivery services | Tunisia | Data processing agreement and standard contractual clauses approved by the European Commission, with supplementary technical measures |
Questions
Write to [email protected]. We can provide the transfer documentation summary under a non disclosure agreement.
Related pages: Security, Trust centre, Legal notice and our customer agreement.
