SUB-PROCESSORS

Last update: November 4, 2025

Oterion relies on the following trusted Sub-processors to support the delivery, operation, and maintenance of the Application and related services.

Each Sub-processor processes personal data in accordance with applicable data protection laws, including the GDPR, and provides appropriate technical and organizational measures to ensure data security.

This list is regularly reviewed and updated as necessary.

Amazon Web Services, Inc.

Purpose of processing: Transactional email services, Marketing email services
Applicable Services: Application, Website, Support Center, Feedback
Location of processing: European Union, United States
Data transfer mechanism: EU-U.S. Data Privacy Framework
Security measures: AWS Compliance Programs

Cloudflare, Inc.

Purpose of processing: Content delivery, Network security, Traffic routing, Load balancing, DNS management
Applicable Services: Application, Website, Support Center, Feedback
Location of processing: Globally (closest to user location)
Security measures: Cloudflare Compliance and Certifications

Incident.io, Inc.

Purpose of processing: Infrastructure status and monitoring
Applicable Services: Application, Website, Support Center
Location of processing: United States
Security measures: Incident.io Trust Center

Microsoft Corporation

Purpose of processing: Email services, Office productivity tools, Video conferencing
Applicable Services: General communication
Location of processing: European Union
Security measures: Microsoft Compliance

OVH SAS

Purpose of processing: Hosting and infrastructure services
Applicable Services: Application, Website, Support Center, Feedback
Location of processing: European Union
Security measures: OVH Compliance and Certification

OVH US LLC

Purpose of processing: Hosting and infrastructure services
Applicable Services: Application, Website, Support Center, Feedback
Location of processing: United States
Security measures: OVH Compliance and Certification