Subprocessors¶
Draft — pending legal review
Working draft. Confirm each provider and processing location, and keep this list current.
Last updated: June 25, 2026
KikiDoc (ARK Consulting) engages a small number of third-party service providers ("subprocessors") to deliver and operate the Service, some of which may process personal data on our behalf. This page is the canonical, up-to-date list and is referenced by our Data Processing Addendum.
| Provider | Purpose | Processing location |
|---|---|---|
| Fly.io | Application hosting and compute | Germany (Frankfurt, EU) |
| Neon | Managed PostgreSQL database | EU (Frankfurt, eu-central-1) |
| Cloudflare | DNS, CDN/proxy, object storage (R2), docs hosting | Global edge (may include non-EU) |
| Resend | Transactional email delivery | United States |
| Lemon Squeezy | Merchant of Record — billing, payments, tax | United States |
International transfers¶
Where personal data is transferred outside the EEA or UK, KikiDoc relies on appropriate safeguards, including EU Standard Contractual Clauses (and the UK Addendum where relevant), adequacy decisions, or equivalent lawful transfer mechanisms.
Changes to this list¶
When we intend to add or replace a subprocessor that processes personal data, we will update this page and provide at least 30 days' prior notice before the new subprocessor begins processing, so controllers can review and, where they have a legitimate basis, object.
To be notified of changes, email [email protected] and ask to be added to subprocessor change notifications. If you object on reasonable data-protection grounds and the objection cannot be resolved in good faith, you may terminate the affected Service as your remedy.