Legal
Sub-processors
Last updated 16 October 2026
These are the companies that may process personal data in the websites you host on Netkeel, or account data needed to run the Services, on our behalf. How we work with them is set out in our Data Processing Agreement and Privacy Policy. The list shows each sub-processor and what it does. Where personal data leaves the EU, the EEA or the UK, the Standard Contractual Clauses in the Data Processing Agreement apply; details of a sub-processor's processing location are available on request from support@netkeel.com.
| Sub-processor | Purpose | Data |
|---|---|---|
| Vultr Holdings | Cloud servers for customers who choose Vultr | Everything on the server: website files, databases, logs and on-server backups |
| Akamai Technologies (Linode) | Cloud servers for customers who choose Akamai Cloud | Everything on the server: website files, databases, logs and on-server backups |
| DigitalOcean | Cloud servers for customers who choose DigitalOcean | Everything on the server: website files, databases, logs and on-server backups |
| Cloudflare | Encrypted off-site backup storage; DNS for website preview addresses; hosting of netkeel.com; bot protection (Turnstile) on our forms | Encrypted backup copies (Cloudflare cannot read them); preview host names; form submissions and visitor IP addresses on netkeel.com |
| UpCloud | Hosts the Netkeel control panel | Account data, server and website settings, activity logs; data passing through the panel's file manager and backup transfers |
| Supabase | Database for the Netkeel control panel | Account data, server and website settings, activity logs |
| Stripe | Card payments and billing | Name, email address, billing address, card details, payment history |
| MailerSend | Account emails: invitations, password resets, alerts and receipts | Name, email address, email content (may include website and server names) |
| Optional "Sign in with Google"; page speed tests you run (PageSpeed Insights) | Sign-in: your Google account email and name. Speed tests: the address of the page tested |
Not on this list
- Sign-in locations: the approximate location of a sign-in is looked up in a DB-IP database stored on our own servers. No IP address is sent to DB-IP.
- Your own backup storage: if you connect your own storage bucket for off-site backups, that provider works for you under your agreement with it, not for us.
- SSL certificates: Let's Encrypt receives the domain names it issues certificates for, as every certificate authority does.
Changes to this list
Before we add or replace a sub-processor, we update this page and email the owners of every workspace at least 30 days in advance. You may object within those 30 days, as described in section 7 of the Data Processing Agreement. Questions: support@netkeel.com.