Sub-processors
Who helps us run Pendira.
The companies that process data on our behalf, what they do and where. We tell you before we add a new one.
Last updated 2 October 2026
In short
- Every sub-processor is bound by a data processing agreement.
- Your jobs, records and files are hosted in the EU.
- We tell you before a new sub-processor starts processing your data.
What a sub-processor is
A sub-processor is a company we use to run Pendira that processes personal data from your company on our behalf. Each one does only the task listed here, under a data processing agreement.
Our sub-processors
| Provider | What they do | Where | Safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Servers that run Pendira | EU | Based in the EU, no transfer |
| MongoDB, Inc. (MongoDB Atlas) | Database for jobs, teams, engineers and records | EU | EU Standard Contractual Clauses |
| Cloudflare, Inc. | Private storage for photos, signatures, receipts and documents, and delivery of the web app | EU, for stored files | EU Standard Contractual Clauses |
| Trigger.dev | Scheduled background tasks. Tasks carry record ids, not job content | EU (Frankfurt) | EU Standard Contractual Clauses |
Messages to phones and inboxes
Text messages and emails travel through their delivery providers. Before a provider carries messages from your company, we add it to this list with its region and safeguard, and we tell you.
Changes to this list
We update this page and tell customers by email before a new sub-processor starts processing their data. If you object, write to hello@pendira.com and we work it out with you, as your data processing agreement sets out.
Our website
Our website, pendira.com, is separate from Pendira and holds no data from your company. The providers it uses are named in our privacy policy and cookie policy.
Related documents
Security and privacy
How we keep your jobs, engineers and money safe, in plain words.
Visit the trust centreData processing agreement
How we process personal data for you, and how to get a signed copy.
Read the DPAPrivacy policy
What we collect, why, and your rights.
Read the policyTerms of service
The terms of using Pendira, in plain words.
Read the termsCookie policy
The cookies on pendira.com, and how to change your choice.
Read the policy
Every job, from request to paid.
See Pendira with your own jobs in a 30 minute demo. Bring a messy week, and we will show you that week in one record.
EU based. GDPR compliant. We never sell your data.
