Only the English version of this document is legally binding.
allyWay Subprocessors
Last updated: 13 October 2026
BlueCloud Software d.o.o. uses the following subprocessors to provide allyWay. They process personal data on behalf of our customers under our Data Processing Agreement (section 5 and Annex 2).
We inform customers at least 30 days before adding or replacing a subprocessor, by email or in the dashboard. Customers may object during this period.
Current subprocessors
| Subprocessor | Purpose | Location of processing | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | Hosting of the Service (servers, backups) | EU (Germany) | not required (EU) |
| Supabase, Inc., USA | Database, authentication, file storage | EU region | Standard Contractual Clauses for any access from outside the EU |
| Functional Software, Inc. (Sentry), USA | Error monitoring | EU region (Germany) | Standard Contractual Clauses for any access from outside the EU |
| OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C.) | AI features (image descriptions, link names, suggestions) | USA | Standard Contractual Clauses |
Not subprocessors
The following services do not process personal data on behalf of our customers and are therefore not listed above: Stripe (payments, independent controller), Google (sign-in, independent controller), the analytics and marketing tools on our own website allyway.ai, and axe-core (open-source software without data transfer). Details are in our Privacy Policy.
Contact
Questions about subprocessors: legal@allyway.ai