Sub-processors
Every third party that processes personal data on our behalf, where it sits, and the safeguard that covers it.
Last updated: 01 August 2026
This page lists every third party that processes personal data on our behalf for this website and the assistant on it. It is the same list that appears in our privacy policy, published separately so it can be checked, linked and subscribed to without reading the whole policy.
Current sub-processors
| Processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: web application, database, backups | Germany | Intra-EU |
| Cloudflare, Inc. | Authoritative DNS and reverse proxy / CDN. Every request to this site passes through Cloudflare, where the TLS connection terminates | United States | Standard Contractual Clauses |
| Sanity Inc. | Headless CMS and image CDN for site content. No conversation content, no leads, no form submissions | United States | Standard Contractual Clauses |
| Brevo (Sendinblue) | Transactional email: booking confirmations and operator alerts | France | Intra-EU |
| GoDaddy LLC (cPanel) | Mailbox and calendar used by the assistant's booking flow | United States | Standard Contractual Clauses |
| Tailscale Inc. | Encrypted overlay network between our own servers. Control plane only; your traffic does not pass through it | United States | Standard Contractual Clauses |
| Anthropic PBC | Fallback path only: internal classification and context compaction. Never the reply you see | United States | Standard Contractual Clauses |
| Google LLC | Embedding model for semantic search across assistant memory. Text only, no IP address, no metadata | United States | Standard Contractual Clauses |
What is deliberately not on this list
Two things people reasonably expect to see here and will not find.
Analytics. We use Plausible, but we host it ourselves on the same infrastructure as the site. No analytics data reaches a third party, and no cross-site tracking happens.
The assistant's answers. The language model that replies to you runs on hardware we own and operate in Sofia. Your message and its reply do not leave our infrastructure for the conversational answer itself. The processors above are used for narrow secondary purposes, not for generating the reply.
Changes to this list
We give at least 30 days' notice before a new sub-processor begins processing personal data, and before we replace an existing one.
To be notified, write to office@cloudsource.bg with the subject "subprocessor updates". Clients working under a data processing agreement are notified directly and may object during the notice period on reasonable data protection grounds.
Client engagements
This page covers this website and its assistant. Where we build or operate a system for a client, the sub-processors for that engagement are set out in the data processing agreement for it. In most engagements they are the client's own cloud accounts rather than ours.