Subprocessors
Last updated: October 13, 2026 · Draft, not yet in force
A subprocessor is a vendor Paycux authorises to process Subscriber Personal Data on its behalf, as described in the Data Processing Addendum. The table below names the vendors Paycux currently relies on, what each one does for the Service and which categories of data it handles.
Current subprocessors
| Subprocessor | Purpose | Data categories | Location |
|---|---|---|---|
| Hetzner Online GmbH — infrastructure hosting | Hosting the Paycux control plane: the application, its database and backups. | All control-plane data at rest, including the Subscriber Personal Data processed by the Service. | European Union data centres |
| Cloudflare — DNS, TLS and edge delivery | DNS for paycux.com, TLS termination and edge delivery of the website and console, and the cookieless page-view and performance measurement described in the cookie policy. | IP address and request metadata (headers, requested addresses, browser information) while requests are in transit. | Cloudflare's global edge network; requests are handled at the location nearest the visitor |
| Resend — transactional e-mail | Delivering Paycux's transactional e-mail: workspace invitations and the account verification and password-reset messages sent by the identity provider; reporting bounces and complaints. | Recipient e-mail address and the content of the message; delivery, bounce and complaint events. | The EU region configured for the sending domain |
| Paddle — payment processing (merchant of record for Paycux workspace subscriptions; customers' own Stripe/Paddle accounts stay with them) | Checkout, payment collection, tax calculation and invoicing for Paycux's own paid plans. | Billing contact and subscription details; payment-card data is collected by Paddle directly and never stored by Paycux. | Paddle's own infrastructure, acting as an independent merchant of record |
How we would notify changes
Before adding a new subprocessor, Paycux intends to update this page at least ten (10) business days in advance. Subscribers who want an active notice of changes, rather than checking this page, can ask legal@paycux.com to be added to a notification list once one exists.
Objecting to a new subprocessor
If a Subscriber has a legitimate data-protection objection to a new subprocessor, it can raise it within the notice window above by emailing legal@paycux.com. The parties would then work in good faith to resolve the objection before the new subprocessor starts handling that Subscriber’s data.