Back

    Legal

    Sub-processors

    Effective: May 2026

    In the course of providing the SaaS platform "zeig", Alexandi Software Solutions engages sub-processors who process personal data on behalf of our customers.

    Sub-processors are only engaged to the extent necessary for the operation, security, and further development of the service.

    The processing of personal data by sub-processors is based on a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR and, in the case of data processing in third countries, the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

    Current Sub-processors

    ProviderPurpose of ProcessingLocation / Region
    Railway, Inc.Hosting of the application and the databaseEU
    Cloudflare R2Object storage for uploaded files (e.g., PDFs, thumbnails)EU
    Cloudflare, Inc.Content Delivery Network (CDN), DDoS protection and security featuresUSA / EU
    Google LLC (Google Sign-In / Gmail API)Authentication, sending emails via connected Google accountsUSA / global
    DodoPaymentsPayment processing for subscriptionsUSA
    Umami Analytics (selbst gehostet auf Railway / self-hosted on Railway)Privacy-friendly web analytics for our marketing pages. Self-hosted on Railway in the EU, no third-party data sharing, no cookies, no personal data.EU

    Data Residency and Third Country Transfers

    Application and database hosting (Railway) as well as storage of uploaded files (Cloudflare R2) take place exclusively within the European Union.

    Individual sub-processors, in particular Google APIs (optional features such as Google Sign-In and Gmail sending) and DodoPayments, process data in third countries outside the European Union, particularly in the USA.

    In these cases, data transfer is based on:

    • EU Standard Contractual Clauses (SCCs) and
    • additional technical and organizational measures to ensure an adequate level of data protection.

    Changes to Sub-processors

    We reserve the right to change sub-processors or add new sub-processors if necessary for the operation or further development of the service.

    Customers will be informed of significant changes to sub-processors in an appropriate manner, particularly by email or within the platform.

    The current list of sub-processors is always available on this page.

    Further Information

    For more information about the processing of personal data, please see: