Sub-processors
Every company that can see anything on your behalf, what they do and where they sit. The list is short on purpose. Everything that stores your data is inside the European Union; the one entry outside it, Cloudflare, carries traffic and is named for that reason.
Who is on the list
Hetzner Online GmbH, in Germany and Finland, runs servers and the object storage. netcup GmbH, in Germany, runs servers as well. Backblaze, Inc., in its EU region in the Netherlands, stores the backups. Mollie B.V., in the Netherlands, handles payments and direct debits and therefore sees your billing details, never your telemetry. Billit NV, in Belgium, produces and dispatches invoices, and sees the same billing details. Mailgun, in its EU region in Germany, delivers transactional mail, which includes alert emails and therefore the title of an issue. Cloudflare, Inc., in the United States, sits in front of every hostname: it terminates TLS, filters attacks and answers DNS, which means every request, including what your SDKs send, passes through it on the way in. It is used for transport only; storage stays in the EU.
Who is not, unless you ask for them
Slack and Microsoft Teams appear only if you configure an alert rule that delivers to them. Both are outside the EEA, both are named in the processing agreement, and neither receives anything until you create such a rule. Removing the rule stops it immediately.
Changes
A new sub-processor is announced at least thirty days before it starts processing. You may object, and if the objection cannot be resolved you may terminate the affected service without penalty.
Fourteen days of Team, without a card.
Sign up with your work address, prove your domain with one DNS record, and paste a DSN. The first stack trace usually arrives before the coffee does.
No card. The trial ends by itself and drops to Free; nothing is charged unless you choose a plan.
