Subprocessors

Last updated: 2026-09-14

Overview

A subprocessor is a third-party company that processes personal data on our behalf to help provide Bilg — for example, to host data, send email, or run part of our infrastructure.

The table below lists each current subprocessor, along with what it does for us, what categories of data it processes, and where it is located.

Some of these subprocessors are located outside the European Union. Where that is the case, our Privacy Policy explains the safeguards we rely on for that transfer. This page is the authoritative, current list; the Privacy Policy names the same subprocessors by name but does not repeat the operational detail (purpose, data shared, location) shown here.

Paddle, our payment provider, is not listed here. As Merchant of Record, Paddle processes payment data as an independent controller rather than on our behalf; see the Privacy Policy.

Data Processing Agreement

If you use the Service to process personal data on behalf of your business or organization, on any plan, contact us at [email protected] and we will provide a Data Processing Agreement covering our processing and the subprocessors listed on this page.

Changes

If we add a new subprocessor, we will update this page before that subprocessor begins processing any data on our behalf.

NamePurposeDataLocation
Hetzner Online GmbHApplication hosting, database and file storageAll account and workspace dataEU (Germany, Finland)
Google LLCText embeddings for semantic search (Gemini API)Document text excerpts and search queriesUnited States
Cloudflare, Inc.Network delivery, TLS, DDoS protection and Turnstile bot protectionIP address and request metadataGlobal
Resend, Inc.Transactional email (sign-in links, notifications)Email address and message contentUnited States
Functional Software, Inc. (Sentry)Error monitoring for the service's serversError reports: technical metadata and user ID, with credentials and email addresses removedGermany (EU)