Sous-traitants
Derniere mise a jour: 2026-04-27
Liste a jour des sous-traitants conformement a l'art. 28 RGPD. Tous les transferts hors UE respectent l'Adequacy Decision EU-US Data Privacy Framework et/ou les CCT 2021/914.
| Sous-traitant | Fonction | Categories de donnees | Localisation | Base du transfert |
|---|---|---|---|---|
| Vercel | Hosting + edge runtime | Request log, IP, user-agent | USA (edge global) | EU-US DPF + CCT |
| Neon | Database PostgreSQL gestito | Tutti i dati applicativi (PII + business) | EU (FRA-1) | UE uniquement |
| Cloudflare R2 | Storage file ECU cifrati | Binari ECU cifrati (AEAD app-level) | EU (FRA) | EU-US DPF + CCT |
| Clerk | Autenticazione admin | userId, email admin, sessione | USA | EU-US DPF + CCT |
| PayPal (Orders v2) | Pagamenti one-shot ordini B2C | Nome, indirizzo billing, email, importo | USA + EU | EU-US DPF + CCT |
| PayPal (Subscriptions/Billing) | Sottoscrizioni B2B ricorrenti (subscribers) | Email subscriber, ragione sociale, indirizzo billing, importo, schedule ricorrenza | USA + EU | EU-US DPF + CCT |
| Resend | Email transazionali | Email destinatario, contenuto messaggio | EU (Irlanda) | UE uniquement |
| Twilio | SMS / WhatsApp (opzionale) | Telefono, contenuto messaggio | USA + EU | EU-US DPF + CCT |
| Inngest | Job queue async | orderId, fileId, event payload (no PII) | USA | CCT 2021/914 Module 2 |
Pour toute demande RGPD (art. 15-22), ecrivez a info.techmatik@gmail.com.