Infrastructure providers and subprocessors
This directory explains infrastructure used by CBBDigital LLC. Merchants control their appointment/staff data and we process it on instructions. We may be a separate controller for our own account, billing, support and security purposes. Company country, server location and countries from which data may be accessed are different concepts.
This directory explains infrastructure used by CBBDigital LLC. Merchants control their appointment/staff data and we process it on instructions. We may be a separate controller for our own account, billing, support and security purposes. Company country, server location and countries from which data may be accessed are different concepts.
Hetzner Online GmbH
- Цел
- Server hosting and infrastructure
- Роля
- Processor for our own data; subprocessor for merchant data processed on instructions
- Местоположение
- Contracting company: Germany; selected server: Helsinki, Finland. This does not locate every other provider or remote access in Finland.
- Условие
- Core hosting
Cloudflare, Inc.
- Цел
- CDN, reverse proxy, WAF, DDoS protection and Tunnel
- Роля
- Processor/subprocessor for covered service data; other roles depend on the activity and applicable terms
- Местоположение
- United States company; global network. No EU-only processing promise.
- Условие
- Website and network security
Google LLC — Google Workspace
- Цел
- Business email and SMTP relay for account, support and configured notifications
- Роля
- Processor/subprocessor for email content on instructions; other service/account data depend on Google's terms
- Местоположение
- United States contracting company; processing and transfers under Workspace terms. No exclusive regional storage promise.
- Условие
- Business email; customer notifications only when enabled
Stripe — entity named in the account agreement
- Цел
- CBBDigital B2B subscription checkout, invoicing and payment security
- Роля
- Processor for relevant instructed services; independent controller for fraud prevention, KYC/AML and other own statutory purposes
- Местоположение
- Entity, locations and transfers depend on the applicable Stripe account agreement and service
- Условие
- Processes B2B subscription and service checkout payments via Stripe Hosted Checkout (pay.cbbdigital.us) according to the accepted order snapshot.
Meta/WhatsApp Cloud API and Google Calendar API are used only when separately configured and enabled for the merchant. Listing them does not mean a connection is active. Calendar API access is not assumed to be covered by the Workspace email CDPA for every API use. Purpose, scope and transfer requirements are assessed for the enabled channel.
The applicable data-processing terms accepted through the Hetzner, Cloudflare, Google Workspace and Stripe account processes are retained in a restricted archive. Public DPA links describe provider terms; private acceptance records, signed copies and confidential audits are not published. A provider DPA alone does not complete our merchant contract or any required international transfer instrument. Prior notice and objections for new or changed subprocessors follow the signed merchant agreement; updating this page does not replace required notice. Accepted contract copies are preserved. Information and requests: info@cbbdigital.us.