Legal
Sub-processors
Third parties we engage to help deliver the Service, with their purpose and location.
Last updated: 28 July 2026
HAKKIU engages the sub-processors below to provide the Service. Each is bound by data protection terms consistent with the GDPR, and HAKKIU remains responsible for their performance. This list supplements our Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase | Database, authentication and application data hosting | Account, authentication and platform data | EU / US (region-dependent) | SCCs / EU–US DPF where applicable |
| Hetzner Online GmbH | Server / application hosting | Application data, logs | Germany (EEA) | Within the EEA |
| Cloudflare | CDN, DNS and edge security | Network / request metadata | Global / US | SCCs / EU–US DPF |
| Resend | Transactional and notification email | Recipient email address and message content | US | SCCs / EU–US DPF |
| Google (Gemini API) | AI vision analysis of monitored content | Content submitted for analysis (may include images/text) | US | SCCs / EU–US DPF |
| Firecrawl | Web scraping / content retrieval | Public web content retrieved for monitoring | United States | SCCs / EU–US DPF |
| Google Analytics | Website analytics (consent-based) | Pseudonymous usage and device data | US | SCCs / EU–US DPF (consent required) |
Changes and notifications
We may update this list as our providers change. Customers can request advance notice of new sub-processors and may object on reasonable data-protection grounds. To receive change notifications or to raise an objection, email privacy@hakkiu.com.
Note: This document is provided for transparency and is not legal advice. HAKKIU is an EU-established company; specific company registration details are set out in our Legal Notice. If you have questions, contact us at legal@hakkiu.com.