Subprocessors
Who processes your data
Last updated: July 11, 2026
To operate ContractMate we rely on a small number of third-party service providers ("subprocessors") that may process personal data on our behalf. Each one is bound by a data processing agreement, processes data only on our instructions, and is listed below together with what it does, where it processes data, and the safeguard that applies.
We keep this list current: when we add or replace a subprocessor, we update this page before the new provider processes any personal data. For how we handle your data more broadly, see our Privacy Policy and Security page .
Current subprocessors
| Provider | Purpose | Processing location | Safeguard |
|---|---|---|---|
| STRATO AG | Application hosting, document storage, and database backups | Germany (EU) | Data remains in the EU |
| OpenAI, L.L.C. | Generates AI Assistant responses from document text and your questions (only when you use the AI Assistant) | USA | EU Standard Contractual Clauses; no retention for model training |
| Stripe | Payment processing and subscription billing | Ireland (EU) / USA | EU Standard Contractual Clauses |
| PostHog | Product analytics (only after you opt in via the cookie banner) | EU Cloud (Frankfurt, Germany) | Data remains in the EU |
| Google (Gmail) | Delivery of transactional emails: verification codes, password resets, and reminders | EU / USA | EU Standard Contractual Clauses |
| Sentry (Functional Software, Inc.) | Application error monitoring | EU data region (Germany) | Event data stored in the EU |
| Cloudflare, Inc. | Cookieless, aggregate website traffic analytics | USA / global | EU Standard Contractual Clauses; no cookies or persistent identifiers |
Questions
If you have questions about any of these providers or want a copy of our data processing terms, contact us at info@contractmate.de .