Infrastructure providers and subprocessors
This directory explains infrastructure used by CBBDigital LLC. Merchants control their appointment/staff data and we process it on instructions. We may be a separate controller for our own account, billing, support and security purposes. Company country, server location and countries from which data may be accessed are different concepts.
This directory explains infrastructure used by CBBDigital LLC. Merchants control their appointment/staff data and we process it on instructions. We may be a separate controller for our own account, billing, support and security purposes. Company country, server location and countries from which data may be accessed are different concepts.
Hetzner Online GmbH
- Qëllimi
- Server hosting and infrastructure
- Roli
- Processor for our own data; subprocessor for merchant data processed on instructions
- Vendndodhja
- Contracting company: Germany; selected server: Helsinki, Finland. This does not locate every other provider or remote access in Finland.
- Kushti
- Core hosting
Cloudflare, Inc.
- Qëllimi
- CDN, reverse proxy, WAF, DDoS protection and Tunnel
- Roli
- Processor/subprocessor for covered service data; other roles depend on the activity and applicable terms
- Vendndodhja
- United States company; global network. No EU-only processing promise.
- Kushti
- Website and network security
Google LLC — Google Workspace
- Qëllimi
- Business email and SMTP relay for account, support and configured notifications
- Roli
- Processor/subprocessor for email content on instructions; other service/account data depend on Google's terms
- Vendndodhja
- United States contracting company; processing and transfers under Workspace terms. No exclusive regional storage promise.
- Kushti
- Business email; customer notifications only when enabled
Stripe — entity named in the account agreement
- Qëllimi
- CBBDigital B2B subscription checkout, invoicing and payment security
- Roli
- Processor for relevant instructed services; independent controller for fraud prevention, KYC/AML and other own statutory purposes
- Vendndodhja
- Entity, locations and transfers depend on the applicable Stripe account agreement and service
- Kushti
- Processes B2B subscription and service checkout payments via Stripe Hosted Checkout (pay.cbbdigital.us) according to the accepted order snapshot.
Meta/WhatsApp Cloud API and Google Calendar API are used only when separately configured and enabled for the merchant. Listing them does not mean a connection is active. Calendar API access is not assumed to be covered by the Workspace email CDPA for every API use. Purpose, scope and transfer requirements are assessed for the enabled channel.
The applicable data-processing terms accepted through the Hetzner, Cloudflare, Google Workspace and Stripe account processes are retained in a restricted archive. Public DPA links describe provider terms; private acceptance records, signed copies and confidential audits are not published. A provider DPA alone does not complete our merchant contract or any required international transfer instrument. Prior notice and objections for new or changed subprocessors follow the signed merchant agreement; updating this page does not replace required notice. Accepted contract copies are preserved. Information and requests: info@cbbdigital.us.