These are the companies that process End User request data on our behalf when your application calls the Maptoolkit API Services. They act under our Data Processing Agreement (§ 08, Annex 2). Other service providers, which only process data for our own purposes, are listed in our Privacy Policy (§ 16).
We announce new or replaced sub-processors on this page at least 30 days before they start processing data. Customers may object within that period (DPA § 08).
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of all systems (API services, databases, website, admin backend), database backups (Object Storage, Helsinki) | Germany (Nuremberg, Falkenstein), Finland (Helsinki) | EU |
| Server4You GmbH | Backups | France (Strasbourg) | EU |
| Cloudflare, Inc. | CDN, DDoS protection, DNS (website and API endpoints). Not used for customers whose contract excludes it | Global network, USA | DPF; SCC |