Subprocessors
The companies that process data for version.cam, what each one does, where, and on what basis personal data may leave the European Union. Last checked on 2026-11-01, against each company's data processing agreement and its own statement of certification under the EU-U.S. Data Privacy Framework (DPF).
| Company | What for | Where | Transfer basis |
|---|---|---|---|
| Cloudflare, Inc., United States | Hosting the pages and the API; the database; the storage of recordings and renders; the queues; the containers that render; the request logs; Turnstile on the services form; the routing of our e-mail addresses | Storage in Cloudflare's EU jurisdiction; the network worldwide; a render holds a version's screens for the seconds it takes, where its container runs | Cloudflare's customer DPA; EU-U.S. DPF, certified; the EU standard contractual clauses in the DPA should the certification lapse |
| GitHub, Inc., United States | Signing in; the App's check runs, comments and issues on your repositories | United States | GitHub's Data Protection Agreement; EU-U.S. DPF, certified; the EU standard contractual clauses otherwise |
| Resend, Inc., United States | E-mail: notifications about clips, the beta's and billing's notices, and the services form's messages | Sent from Resend's EU region; the company and its logs are in the United States | Resend's DPA; EU-U.S. DPF, certified; the EU standard contractual clauses in the DPA |
| Stripe Payments Europe, Ltd., Ireland | Payments, invoices and tax, once payment opens | Ireland, with Stripe's own processors; Stripe, LLC in the United States | Stripe's DPA with its data transfers addendum; EU-U.S. DPF, certified, for the United States |
Who receives data without processing it for us
GitHub receives the App's check runs, comments and issues on your repositories, on your project's instruction. Slack receives what your project's webhook says, if you gave it one. Nobody else: the badge on the front page is drawn by our own API.
Changes
We tell customers by e-mail, to the address we have for the account, 30 days before adding a company to this list or widening what one does. You may object within those 30 days; if we cannot meet the objection, you may end the agreement, and the unused part of a paid period is refunded. Questions:hello@version.cam.