Who else touches your data.
The complete list, not a representative sample. Last updated 30 July 2026.
| Company | What for | Where | What it holds |
|---|---|---|---|
| Hetzner Online GmbH | Hosting and backup storage | Germany (company), servers and backups in Finland | The application and its database: the encrypted connection to your portal, your alert-channel URLs, and the derived figures behind your trend. |
| Paddle.com Market Ltd | Payments, as merchant of record | United Kingdom | Billing details, your company name and VAT number, and the invoices. Tendal never receives or stores your card details. |
| AhaSend B.V. | Sending alert emails | Netherlands (company), servers in Germany, Bulgaria and Norway | Your email address and the derived figures inside an alert. Nothing from your HubSpot portal beyond those figures. |
Two that are not on the list, and why
HubSpot is not a sub-processor of ours. It is your own system, holding your own data under your own agreement with them. Tendal reads from it with permission you grant and can revoke.
Slack, Discord and Google Chat receive alerts only if you configure a webhook pointing at them, and only the derived figures in the alert. You choose the destination and your agreement with that platform governs what happens next. If you configure none, nothing leaves. Email alerts are the opposite case, which is why AhaSend is on the list above and these three are not: there you choose the address, but we choose the company that carries the message.
Where your data lives
Everything read from your portal stays inside the European Union. The application, its database and its backups run on Hetzner infrastructure in Finland. Two things sit outside that and are worth naming rather than glossing. Payments are handled by Paddle in the United Kingdom, which holds billing details but never sees your HubSpot data. Alert emails are delivered by AhaSend, a Dutch company, on infrastructure in Germany, Bulgaria and Norway. Norway is inside the European Economic Area but not the European Union, so the same data protection rules apply. AhaSend also runs an optional node in the United States, switched on per account and never used otherwise, not even during an outage. We have not switched it on. An alert carries the derived figures and a link back to Tendal, not records from your portal.
Changes
If we add a sub-processor we will update this page and email subscribers before it starts processing anything, so there is time to object. Write to hello@tendal.io to be told about changes, or with a question about any of the above.