Sub-processor List
Last updated:
Lumbox uses the following third-party sub-processors to deliver its services. All sub-processors are contractually bound to process personal data only on our instructions and in compliance with GDPR.
| Sub-processor | Purpose | Country |
|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure / server hosting (DE, FI) | Germany / Finland |
| Garage (S3-compatible object storage, self-hosted) | Build artifact and project data storage | EU (per project region class) |
| Brevo (ex-Sendinblue) | Transactional email delivery (account confirmation, notifications) | France |
| Stripe, Inc. | Payment processing and subscription management | United States (SCCs applied) |
| Plausible Analytics | Website analytics (cookieless, no personal data) | Germany / EU |
| Harbor (self-hosted OCI registry) | Container image registry for builds | EU (self-hosted) |
Change notification
We will publish changes to this list with at least 30 days' advance notice. Subscribe to our changelog or contact privacy@lumbox.eu to receive notifications.