Sub-processors
The third-party companies Panelicious uses to provide the service, what each one does, and where your data goes.
To run Panelicious we rely on a small number of third-party companies — for hosting, payments, and email. Under data protection law these are our sub-processors: they may handle personal data on our behalf, and only ever on our instructions.
This page is the authoritative list. It is referenced by our Privacy Policy and forms Appendix 2 of our Data Processing Agreement.
Current sub-processors
| Provider | What they do for us | Data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, and network and application security. | Account data, service usage data, IP addresses, and customer content. | United States, with processing at global edge locations | UK IDTA and EU Standard Contractual Clauses |
| Google Cloud EMEA Limited | Cloud infrastructure and data storage. | Account data, device configuration data, and service usage data. | United States and European Union | UK IDTA and EU Standard Contractual Clauses |
| Google Ireland Limited | Business email and internal document storage. | Contact details and the content of correspondence with us. | European Union and United States | UK IDTA and EU Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Payment processing and subscription billing. | Billing details and contact details. Full card numbers are handled by Stripe and are not stored by Panelicious. | Ireland and United States | UK IDTA and EU Standard Contractual Clauses |
| Jitbit Ltd | Customer support ticketing and knowledge base. | Contact details and the content of correspondence with us. | United Kingdom (provider); United States (hosting) | UK-established provider; US hosting under the provider's own processing terms |
| Resend, Inc. | Delivery of transactional email. | Contact details and the content of the messages sent. | United States | EU Standard Contractual Clauses |
How this list is kept accurate
This list is not maintained by hand alongside the documents that cite it. It is generated from a single data file, and an automated check in our platform codebase fails the build if the services our software actually uses do not match what is published here. Adding a new third-party service is therefore a change to this page first, and to the code second.
Changes
We may add or replace sub-processors as the Service develops. When we do, this page is updated. Customers with a Data Processing Agreement in place who wish to be notified of changes in advance should contact us at support@panelicious.com.
Not sub-processors
For completeness, the following are not on this list because they do not process personal data on our behalf:
- Analytics providers. We do not use Google Analytics or any other analytics service. We set no analytics cookies and do not track visitors. See our Cookie Policy.
- Advertising networks. We do not use any.
Version history
| Version | Date | Changes |
|---|---|---|
| 1.0 | 15 August 2026 | First published list. |