Last updated: 18 June 2026
solidtime uses a small number of trusted third-party providers (“sub-processors”) to help deliver the solidtime time-tracking service. A sub-processor is a third party that processes personal data on solidtime’s behalf. This page lists the sub-processors currently authorized under our Data Processing Agreement and is kept up to date as our infrastructure changes.
Personal data is stored and primarily processed within the European Economic Area (EEA). Where a sub-processor’s provider is established outside the EEA — currently only Sentry, whose provider is US-based though that data is stored in its EU region — and data is transferred to or accessed from outside the EEA, we put appropriate safeguards in place under applicable data protection law, such as the European Commission’s Standard Contractual Clauses and, where required, supplementary measures. This mirrors clause 12 of our Data Processing Agreement.
Current sub-processors
| Sub-processor | Purpose | Location | Privacy & DPA |
|---|---|---|---|
| Scaleway SAS | Cloud hosting and transactional email | France (EEA) | Privacy · DPA |
| OVH SAS (OVHcloud) | Offsite backups | France (EEA) | Privacy · DPA |
| Hetzner Online GmbH | Hosting of monitoring services and fallback infrastructure | Germany (EEA) | Privacy · DPA |
| Functional Software, Inc. (Sentry) — EU region | Application error and performance monitoring | EU data residency (US-based provider) | Privacy · DPA |
| Lettermint B.V. | Fallback transactional email (invitations, password resets, notifications) | EU/EEA (France and other EU/EEA member states) | Privacy · DPA |
A note on payments
Card payments are handled by Paddle (Paddle.com Market Ltd) as our Merchant of Record. Under that model Paddle is the reseller of record and an independent controller of the checkout and payment data you provide — not a sub-processor acting on solidtime’s behalf — so it is not listed in the table above. Paddle’s handling of that data is governed by its own terms and privacy notice; see our Privacy Policy for how this fits together.
A note on website analytics
For our public website we use Plausible Analytics (Plausible Insights OÜ, Estonia, EEA) — a privacy-focused, cookieless analytics tool that measures aggregated website traffic and does not track visitors across sites or build personal profiles. Because this concerns our own website rather than the Customer Personal Data we process under the DPA, Plausible operates under our Privacy Policy as part of solidtime’s own processing as a controller — not as a sub-processor acting on solidtime’s behalf — so it is not listed in the table above. See Plausible’s privacy policy and DPA for details.
Changes to this list
We add or replace sub-processors from time to time. The process — advance notice, your right to object, our responsibility for each sub-processor, and the limited emergency exception — is set out in clause 6 of our Data Processing Agreement. To be told when this list changes, email us at hello@solidtime.io.
Questions
For any questions about our sub-processors or data protection generally, contact us at hello@solidtime.io.