Data processing supply chain
Subprocessor register
Providers with a role in delivering Lyniti are listed with purpose, customer-data scope, region position, transfer basis, and provider data-processing terms.
Last reviewed8 August 2026
| Provider | Role | Data processed | Region | Transfer position | Terms |
|---|---|---|---|---|---|
Hetzner Online GmbH | Core compute and hosting infrastructure | Application traffic, customer content, service logs, and encrypted service data hosted on Lyniti deployments | Falkenstein, Germany - Core compute; Nuremberg, Germany - Secondary | EU processing under provider DPA | Provider DPA |
Cloudflare, Inc. | CDN, network-edge services, and R2 object storage | Request metadata, IP and security signals, cached delivery data, object metadata, and file ciphertext encrypted by Lyniti with AES-256-GCM before R2 storage | Global network edge; R2 data location Eastern Europe (EEUR) | Cloudflare DPA and applicable transfer safeguards | Provider DPA |
Plus Five Five, Inc. (Resend) | Transactional email delivery | Recipient address, message content, delivery metadata, and attachments when included in an email | Ireland (eu-west-1) | Provider DPA includes EU Standard Contractual Clauses | Provider DPA |
Stripe | Payment processing, subscriptions, invoices, and billing events | Billing contacts, customer and subscription identifiers, payment and invoice records; Lyniti does not store full card numbers | EEA, United States, and other service locations described by Stripe | Stripe DPA and Data Transfers Addendum | Provider DPA |
Lyniti-operated PostgreSQL | Primary structured application database | Account, workspace, collaboration, business, billing-reference, permission, and audit records | Falkenstein, Germany | No separate SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Lyniti-operated Redis | Cache, session state, coordination, and realtime support | Short-lived cached application data, authorization snapshots, session and realtime coordination records | Falkenstein, Germany | No separate SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Custom Analytics Solutions | Custom privacy-focused service and website analytics solution | Page, feature, performance, and event metadata where configured and permitted by consent settings | Nuremberg, Germany | No separate analytics SaaS processor; underlying hosting provider applies | Not applicable - Lyniti operated |
Changes and objections
Lyniti may update this register when a provider, purpose, or processing location changes. Material changes should be reviewed before a new provider begins processing production customer data.
Enterprise customers may request notice terms or raise a reasonable data-protection objection through their signed DPA or order. For the current register or a vendor-review request, contact: