Sub-processors
Last updated: 17 August 2026
Overview
Rivestack is operated by OPSAFLOW SAS, a company incorporated in France (SIREN 990 431 215, 60 rue François 1er, 75008 Paris). To deliver our managed PostgreSQL service we rely on a small number of carefully selected third-party providers, our "sub-processors", who may process customer personal data on our behalf.
One exception to the "on our behalf" model: Stripe acts as merchant of record for paid subscriptions and is an independent controller of the payment data it processes, in addition to any processing it performs for us.
This page lists every sub-processor we currently use, what they do, and where they process data. It is part of our Data Processing Agreement (DPA) and is referenced from Annex C of that document.
How we notify you of changes
We will update this page whenever we add or replace a sub-processor. If you want to be notified by email before changes take effect, please email legal@rivestack.io with the subject "Subscribe: sub-processor updates" and we'll add you to the notification list. New or replacement sub-processors are announced at least 30 days before they begin processing customer data, giving you time to object as set out in our DPA.
Current sub-processors
| # | Sub-processor | Entity & location | Purpose | Data processed |
|---|---|---|---|---|
| 1 | Hetzner Online GmbH | Germany (EEA) | Core compute and storage infrastructure for customer PostgreSQL clusters and the Rivestack control plane | All data customers store in their databases; account metadata |
| 2 | DigitalOcean, LLC (Spaces) | Frankfurt, Germany (EEA) | Encrypted object storage for database backups | Encrypted backup files |
| 3 | Okta, Inc. (Auth0) | Ireland / United States | Authentication for the Rivestack console (login, MFA, SSO) | Account identifiers, email addresses, IP addresses, login metadata |
| 4 | Cloudflare, Inc. | Global edge network; EU PoPs serve EU traffic | CDN, DDoS protection, Web Application Firewall | IP addresses, request headers and metadata |
| 5 | Stripe, Inc. (incl. Stripe Payments Europe, Ltd.) | United States / Ireland (EEA) | Payment processing as merchant of record, subscription management, invoicing, tax collection and remittance. For payment data, Stripe acts as an independent controller rather than solely on our behalf. | Billing name, email, address, payment-method metadata, transaction history |
| 6 | Resend, Inc. | United States / EU | Transactional email (account, billing, security notifications) | Email address, name, transactional email content |
| 7 | Loops Inc. | United States | Lifecycle / product email communications | Email address, name, engagement metadata |
| 8 | Groq, Inc. | United States | LLM API for in-product assistant features | Prompts and metadata submitted to the assistant; no customer database content unless the customer explicitly initiates it |
| 9 | Google Ireland Limited (Google Analytics) | Ireland (EEA) | Aggregated, IP-anonymised analytics on use of rivestack.io | Truncated IP address, browser metadata, page-view events |
International transfers
Customer database content is hosted in the EEA (Hetzner, Germany) and backups remain in the EEA (DigitalOcean Spaces, Frankfurt). A subset of operational sub-processors above is located outside the EEA. For those, we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) and, where applicable, the UK International Data Transfer Agreement, together with the technical and organisational safeguards described in our DPA.
Questions
Email legal@rivestack.io for any question about this page, to request a copy of our DPA, or to subscribe to update notifications.
This sub-processor list forms part of the Rivestack Data Processing Agreement.