Subprocessors

Draft list for product linking. It says who runs the servers Directo uses today, where they are, which provider is the production target still being set up, and which providers are planned but not connected. A provider is marked “In use” only once it holds real traffic or data. It is not a signed processor schedule; the DPA that will reference it is pending counsel. The list changes only when the hosting changes, and the date at the top moves with it.

• Hetzner Online GmbH

  Production target — being set up

  Will run the API, Postgres, Redis, uploaded files and the nightly database backups on a Hetzner Cloud server managed through Coolify; in production the web app runs on the same server.

  Falkenstein, Germany (EU). Server backups stay in the same Hetzner location.

  Production target being set up: the account and server are not created yet, so no data reaches Hetzner today. Live from the moment the Coolify instance serves production traffic.

• Vercel

  In use

  Builds and serves pull-request previews of the Next.js web app and, until production goes live on the Hetzner server, the public Demo Bistro preview.

  The regions configured for the Vercel project. Vercel is a US company, so requests through a preview may leave the EU/EEA; the transfer relies on Vercel's data processing addendum (standard contractual clauses / EU-US Data Privacy Framework — counsel confirms).

  In use for previews. Previews point at a demo or test API, not at production data; the public preview reaches its demo API on an operator-controlled host in the EU through a Cloudflare tunnel.

• Email provider (not yet chosen)

  Planned / not live

  Would deliver sign-in links, password resets and the monthly report to the accountant. Candidates: Brevo, Postmark, Amazon SES.

  Decided when the provider is chosen; an EU region is the intent.

  Not connected: EMAIL_BACKEND=log, so no email leaves the server today.

• Sentry

  Planned / not live

  Error reports from the API (stack trace and request id, with send_default_pii off) — only when SENTRY_DSN is set.

  Decided when the project is created; Sentry offers EU-hosted projects.

  Not enabled: SENTRY_DSN is empty, so the SDK is installed but silent.

Not subprocessors (yet)

FiscalNet, NETOPIA, Stripe, ANAF, Glovo, Bolt Food, Wolt, Google Business, sendSMS / Brevo / Twilio, REGES, Metro, and Selgros appear on Connect as Setup or Coming soon. Demo Bistro does not store live partner secrets. They are not subprocessors until a venue actually connects them. At onboarding the API looks a Romanian company up in ANAF's public VAT register by its CUI; that sends only the CUI. For a sole trader (PFA, II, IF) the CUI and ANAF's answer identify the person, which the venue's own registration requires.

Demo menu photographs may be loaded from a public Unsplash URL. That is demo catalog content, not a customer data processor.