Vendors and Subprocessors
Last updated: May 3, 2026
This page summarizes the main vendors and subprocessors used by AnalyticsCLI based on the current production and repository setup. The live vendor list is kept aligned with enabled production services.
1. How to read this page
We distinguish between:
- subprocessors used when we process customer data on behalf of our tenants; and
- vendors used by AnalyticsCLI for our own website, account, billing, security, and operational purposes.
2. Subprocessors for tenant customer data
| Vendor | Purpose | Region | Notes |
|---|---|---|---|
| Hetzner Online GmbH | Core infrastructure hosting | Germany | Used for core application and database workloads hosted in Germany. |
| Cloudflare, Inc. | Edge ingestion, Workers, Queues, DNS, proxy/CDN/caching where enabled | Global network | Relevant where customer data passes through Cloudflare-backed ingestion or delivery paths. |
3. Self-hosted analytics and monitoring
We currently self-host Plausible Analytics on our own infrastructure. In that self-hosted setup, Plausible does not add a separate external analytics vendor. Public website Plausible is loaded only after optional analytics consent.
We use a self-hosted GlitchTip/Sentry-compatible endpoint where error monitoring is enabled. Client-side monitoring is loaded only after optional monitoring consent.
4. Vendors used by AnalyticsCLI for our own operations
| Vendor | Purpose | Region | Notes |
|---|---|---|---|
| Better Auth (self-hosted) | Authentication and session management | Own infrastructure | Implemented as a dedicated first-party auth service with auth data stored in our own Postgres control-plane tables. |
| SMTP / transactional email provider | Verification and password reset email delivery | Configured provider region | Only relevant if a live external SMTP provider is configured for account emails. |
| Paddle group entities | Billing and checkout | Provider-dependent processing locations | Includes, where applicable, Paddle.com Market Ltd., Paddle.com Inc., and Paddle Payments Ltd. |
| GlitchTip/Sentry-compatible self-hosting | Error monitoring | Own infrastructure | Used only where monitoring DSNs are configured in the live environment. |
| Cloudflare, Inc. | DNS, reverse proxy, CDN, caching, and Turnstile | Global network | Used for public edge and traffic management functions where enabled in production. |
5. International transfers
Our core hosting is in Germany. Some supporting vendors may nevertheless process data outside the EU or EEA. Where applicable, we rely on an adequacy decision or other safeguards under Chapter V GDPR, including the European Commission's Standard Contractual Clauses.
6. Further information
For more detail, see our Privacy Policy. Tenants needing contractual processor information should request our DPA/AVV package and current subprocessor information.