In accordance with the Siana Data Processing Agreement (DPA), SPALOPIA, S.L. engages the following sub-processors to provide ancillary services. All of them are subject to contractual data protection obligations equivalent to those assumed by SPALOPIA towards its customers.
This list is kept up to date. Any addition or replacement of sub-processors will be published on this page at least fifteen (15) calendar days before it takes effect, in accordance with clause 5 of the DPA. If you would like to receive notifications of changes, write to us at soporte@spalopia.com.
01Infrastructure and service delivery
Amazon Web Services (AWS)
Hosting of the platform and databases. Processing in data centres in the European Union. Any transfers to its US parent company are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Hetzner Online GmbH
Infrastructure hosting. Processing in data centres in Germany and Finland (European Union).
OVHcloud
Infrastructure hosting. Processing in data centres in the European Union.
Supabase
Database and authentication infrastructure. Projects hosted in European Union regions. Any transfers to its US parent company are covered by standard contractual clauses.
Lovable
Web development and deployment platform. European Union company (Sweden).
Vercel
Hosting and delivery of web applications. Processes traffic data (such as IP addresses). Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Google Cloud (Google Ireland Ltd.)
Web analytics and tagging services (Google Tag Manager). Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
02Payment processing
Stripe Payments Europe, Ltd.
Payment gateway and payment processing. European Union entity (Ireland). Transfers to its US parent company covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Redsys Servicios de Procesamiento, S.L.
Payment gateway. Processing in Spain.
03Support, communications and internal management
Google Workspace (Google Ireland Ltd.)
Email, document storage and internal collaboration tools. Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Aircall
Customer support telephony. European Union company (France).
HubSpot
CRM and customer communications. Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Holded
Invoicing and administrative management. Processing in Spain.
Slack
Internal team messaging. May contain references to customer support cases. Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Notion
Internal documentation. May contain references to customer support cases. Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Sentry
Application error monitoring. Data are sent in minimised and, as far as possible, anonymised form. Transfers covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Postman
API development and testing tool. Transfers covered by standard contractual clauses.