SUBPROCESSORS

Third parties we work with

These are the third parties that may process customer data on our behalf, grouped by purpose, with the products that use them.

Notice of changes: Customers are notified at least 30 days before a new subprocessor is added or a material change is made. Subscribe to subprocessor updates.

Hosting, network & operations

Contabo GmbH

📍 EU (Germany)
Privacy & DPA →

Purpose: Dedicated server hosting for all production systems, and off-site backup storage (Object Storage)

All products

Cloudflare

📍 Global network, EU primary
Privacy & DPA →

Purpose: DNS, reverse proxy, TLS termination, web application firewall, DDoS protection, static asset storage

All products

Microsoft Azure

📍 EU
Privacy & DPA →

Purpose: Second off-site backup copy (Azure Storage); transactional email delivery (Azure Communication Services); AI language models (Azure OpenAI); document recognition (Azure AI Document Intelligence)

All products (backups)Badex LogisticsBadex SignatureLandmeterOS

Sentry (Functional Software)

📍 EU (Germany — de.sentry.io)
Privacy & DPA →

Purpose: Application error monitoring (technical error reports, which can include user identifiers)

Badex LogisticsBadex Signature

GitHub (Microsoft)

📍 Global
Privacy & DPA →

Purpose: Source code hosting (no customer data)

All products

Microsoft 365 & sign-in

Microsoft 365 / Microsoft Graph

📍 EU (regional)
Privacy & DPA →

Purpose: Email signature deployment, Microsoft 365 integration and sign-in with Microsoft; company email

Badex SignatureBadex InvoiceBadex LogisticsLandmeterOS

Google

📍 Global / EU
Privacy & DPA →

Purpose: Sign-in with Google (optional); in Badex Logistics also Google Maps, search and Google Drive

Badex SignatureBadex InvoiceBadex LogisticsLandmeterOS

Payments & e-invoicing

Stripe

📍 EU (Ireland)
Privacy & DPA →

Purpose: Subscriptions and card payments (Badex never sees or stores payment cards)

Badex SignatureBadex Invoice

Recommand

📍 EU (Belgium)
Privacy & DPA →

Purpose: Peppol access point for sending and receiving e-invoices

Badex Invoice

Storecove

📍 EU (Netherlands)
Privacy & DPA →

Purpose: Peppol access point for sending and receiving e-invoices

Badex Invoice

Maps, geocoding & routing

Mapbox

📍 USA
Privacy & DPA →

Purpose: Maps and address geocoding

Badex Logistics

OpenCage

📍 EU (Germany)
Privacy & DPA →

Purpose: Address geocoding

Badex Logistics

openrouteservice (HeiGIT)

📍 EU (Germany)
Privacy & DPA →

Purpose: Route calculation

Badex Logistics

PTV Group

📍 EU (Germany)
Privacy & DPA →

Purpose: Truck route planning

Badex Logistics

MapTiler

📍 Switzerland (EU adequacy)
Privacy & DPA →

Purpose: Map tiles

Badex Logistics

Expo (650 Industries)

📍 USA
Privacy & DPA →

Purpose: Push notifications for the mobile app

Badex Logistics

AI services

Anthropic

📍 USA
Privacy & DPA →

Purpose: AI language models for assistant features

Badex Signature

Voyage AI

📍 USA
Privacy & DPA →

Purpose: Text embeddings for AI-assisted search (metadata only, no email body content)

Badex Signature

Groq

📍 USA
Privacy & DPA →

Purpose: Fast AI inference

Badex SignatureLandmeterOS

Some subprocessors are located outside the EU/EEA (USA). These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. Services we run ourselves on our own servers (for example GPS tracking, MDM and local AI models) are not listed, as no third party processes the data.

Last updated: November 4, 2026