Subprocessors and providers
Last updated: October 3, 2026
This page lists the providers that process data to run Takt. It is part of the privacy policy and of the data processing agreement: customers are notified 30 days before a subprocessor is added or replaced, and may object.
1. Subprocessors
These providers process data on behalf of VSK, on instructions and under contract (GDPR article 28).
| Provider | Role | Data | Country | Safeguard |
|---|---|---|---|---|
| Contabo GmbH | Hosting of servers, databases and backups | All service data | Germany | European Union, processing agreement |
| Cloudflare, Inc. | Delivery and protection of all traffic (DNS, proxy, abuse prevention) | IP address, requested address, request headers, in transit only | United States, global network | Data Privacy Framework and standard contractual clauses |
| Sendinblue SAS (Brevo) | Sending of service e-mails, reports, alerts and the newsletter | Recipient e-mail, message content | France | European Union, processing agreement |
| Stripe Payments Europe, Ltd. | Subscription payments, invoices, VAT calculation | Name, billing address, e-mail, VAT number, payment method | Ireland, with transfers to Stripe, Inc. in the United States | Data Privacy Framework and standard contractual clauses |
2. Services used at your request
These services only come into play if you turn them on. They then process your data as independent controllers, under their own privacy policy.
| Provider | Role | Data | Country | Safeguard |
|---|---|---|---|---|
| Google LLC | Sign in with Google, import from Google Analytics 4, Search Console reading | Google identifier, e-mail, name, avatar, read-only access tokens | United States | Data Privacy Framework |
| GitHub, Inc. | Sign in with GitHub | GitHub identifier, e-mail, name, avatar | United States | Data Privacy Framework |
3. What never leaves our servers
- Visitor geolocation uses a database installed on our servers: no IP address is sent to a third-party service.
- Icons of websites and traffic sources are fetched by our servers: the reader’s browser contacts no icon service.
- The dashboard loads no third-party script, font or tracker.