Vendors and Subprocessors
Last updated: March 4, 2026
This page summarizes the main vendors and subprocessors used by AnalyticsCLI based on the current production and repository setup. Replace any remaining placeholders before treating this page as final legal disclosure.
1. How to read this page
We distinguish between:
- subprocessors used when we process customer data on behalf of our tenants; and
- vendors used by AnalyticsCLI for our own website, account, billing, security, and operational purposes.
2. Subprocessors for tenant customer data
| Vendor | Purpose | Region | Notes |
|---|---|---|---|
| Hetzner Online GmbH | Core infrastructure hosting | Germany | Used for core application and database workloads hosted in Germany. |
| Cloudflare, Inc. | Edge ingestion, Workers, Queues, DNS, proxy/CDN/caching where enabled | Global network | Relevant where customer data passes through Cloudflare-backed ingestion or delivery paths. |
3. Self-hosted analytics
We currently self-host Plausible Analytics on our own infrastructure. In that self-hosted setup, Plausible does not add a separate external analytics vendor.
4. Vendors used by AnalyticsCLI for our own operations
| Vendor | Purpose | Region | Notes |
|---|---|---|---|
| Clerk, Inc. | Authentication and session management | [verify live region/paths] | The current frontend attempts to load Clerk JavaScript primarily from the Clerk account domain associated with the publishable key, with configurable override support. |
| Paddle group entities | Billing and checkout | [entity-dependent] | Includes, where applicable, Paddle.com Market Ltd., Paddle.com Inc., and Paddle Payments Ltd. |
| Functional Software, Inc. d/b/a Sentry | Error monitoring | Germany | Used only where Sentry is enabled in the live environment. |
| Cloudflare, Inc. | DNS, reverse proxy, CDN, caching, and Turnstile | Global network | Used for public edge and traffic management functions where enabled in production. |
5. International transfers
Our core hosting is in Germany. Some supporting vendors may nevertheless process data outside the EU or EEA. Where applicable, we rely on an adequacy decision or other safeguards under Chapter V GDPR, including the European Commission's Standard Contractual Clauses.
6. Further information
For more detail, see our Privacy Policy. Tenants needing contractual processor information should request our DPA/AVV package and current subprocessor information.