Last updated: 2026-10-28
The service providers below process personal data on behalf of Scrap.io, under contracts that require them to protect it. This list is referenced by our Privacy Policy and by our Data Processing Agreement. We keep it up to date. When a change concerns a provider marked as processing Customer Personal Data, the personal data covered by our Data Processing Agreement, we notify our customers as set out in section 6 of that agreement.
| Provider | Role | Country | Transfer safeguard | Processes Customer Personal Data (DPA) |
|---|---|---|---|---|
| Amazon Web Services | Hosting of the application, database and files | United States | EU US Data Privacy Framework and UK extension; standard contractual clauses and UK Addendum | Yes |
| Linode (Akamai) | Hosting of our business database | United States | EU US Data Privacy Framework and UK extension | Yes |
| OVH | Hosting of our business database | Canada | Adequacy decisions for Canada | Yes |
| Cloudflare | DNS and protection of the web traffic | United States, global network | EU US Data Privacy Framework and UK extension | Yes |
| Stripe | Card payments | United States and EU | EU US Data Privacy Framework and UK extension | No |
| Postmark (ActiveCampaign) | Transactional emails | United States | EU US Data Privacy Framework and UK extension | No |
| Customer.io | Service and marketing emails | United States | Standard contractual clauses and UK Addendum | No |
| Crisp | Support chat | EU (Netherlands and Germany); connection logs, including IP addresses, pass through relay servers in the United States and Singapore | Standard contractual clauses and UK Addendum for the relay logs | No |
| Bugsnag (SmartBear) | Error monitoring | United States | Standard contractual clauses and UK Addendum | No |
| Mixpanel | Product analytics | United States | EU US Data Privacy Framework and UK extension | No |
| Google Analytics | Website audience measurement | United States | EU US Data Privacy Framework and UK extension | No |
| Advertising measurement | United States | EU US Data Privacy Framework and UK extension | No | |
| Satismeter (Productboard) | Satisfaction surveys shown to customers in the application | United States | Standard contractual clauses and UK Addendum | No |
| X (Twitter) | Advertising measurement | United States | Standard contractual clauses and UK Addendum | No |
| Google Ads | Advertising measurement | United States | EU US Data Privacy Framework and UK extension | No |
| ipdata | Reputation of the IP address of visitors and at sign-up, to prevent fraud and abuse | United States | Standard contractual clauses and UK Addendum | No |
| Make (Celonis) | Automation of customer follow-up: sign-ups, first use, paid and failed invoices | Czech Republic | EU, no transfer outside the EEA | No |
| Slack | Internal notifications of sign-ups and payments | United States | EU US Data Privacy Framework and UK extension | No |
| Prighter EU Rep GmbH | EU representative (Article 27 GDPR) and intake of privacy requests | Austria | EU, no transfer outside the EEA | No |
The standard contractual clauses named in this table are those approved by the European Commission, and the "UK Addendum" is the UK International Data Transfer Addendum.