Subprocessors
| Subprocessor | Headquarters | Processing location | Purpose | Data processed | DPA |
|---|---|---|---|---|---|
| Scaleway (Scaleway SAS) | France | France (Paris) | Dedicated server hosting (Elastic Metal) in Paris | Data of the managed services hosted on these servers | Yes |
| Stripe (Stripe Inc.) | United States | United States | Payment processing | Billing data, payment tokens | Yes |
| Cloudflare (Cloudflare Inc.) | United States | Global network of points of presence | DNS and DDoS protection | Visitor IP addresses, HTTP requests | Yes |
| Tailscale (Tailscale Inc.) | United States | Global relay network, European and outside Europe | Relay map and fallback relaying for the managed Zero Trust VPN (Headscale), when no direct connection is possible | Encrypted WireGuard traffic, not decryptable by the relay; IP addresses, volumes, timestamps | No |
| Brevo (Brevo SAS) | France | European Union; sub-processors in the United States and India | Transactional quota alert e-mails, to the administrators of customer organizations | Recipient's e-mail address, organization name, namespace, quota dimension and percentage | No |
| BetterStack (Better Stack Ltd) | Lithuania (EU) | European Union | Uptime monitoring | Public URLs, response times | Yes |
A European alternative to Cloudflare is being evaluated.
No data processing agreement currently governs the use of Tailscale Inc.'s relays: the managed Zero Trust VPN's fallback uses a public relay map, which Tailscale Inc. maintains. Relayed traffic stays encrypted end to end by WireGuard and cannot be decrypted by a relay, which holds no key; a direct connection uses no relay.
Brevo sends no e-mail yet: the sender stays disabled until Brevo's data processing agreement is signed, with its standard contractual clauses for transfers to its sub-processors outside Europe (Brevo Inc., Cloudflare, Zendesk and Omni in the United States, Brevo CRM Solutions Limited in India).
Self-hosted services in France
The following services are operated by Bunker, in the datacenters it operates in France or on the servers it rents from Scaleway. They are not subprocessors.
Keycloak
Authentication and identity management
PostgreSQL
Databases
Redis
Cache and message queues
Matomo
Web analytics (CNIL exemption)
GitLab
CI/CD and code management
Grafana / Loki / Tempo / Mimir
Observability and monitoring
Ceph S3
Object storage
DocuSeal
Electronic signatures
N8N
Workflow automation
CrowdSec
WAF and security protection
Headscale
WireGuard VPN
Update policy
We notify our clients by email at least 30 days before adding any new subprocessor. You may object to the addition of a new subprocessor under the terms of your contract.
Last updated: October 2026
Questions about our subprocessors?
Contact our DPO at robin@france-nuage.fr