Our sub-processors
The third parties we rely on to run AppLander and host our customers' landing pages. This is our Article 28(4) sub-processor register.
AppLander acts as a processor for the personal data of visitors to our customers' landing pages. The companies below process that data on our customers' behalf, each bound by an Article 28 data processing agreement.
Last updated:
| Sub-processor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing for paid plans | Billing identifiers, subscription metadata | United States | EU-US Data Privacy Framework |
| Amazon Web Services EMEA SARL (Amazon SES) | Transactional & service email delivery (incl. deletion-verification mail) | Email address, display name, message body | Germany (eu-central-1, Frankfurt) | AWS DPA incorporating EU Standard Contractual Clauses |
| Hetzner Online GmbH | Hosting, compute, database & file storage (self-hosted, no separate storage vendor) | All hosted personal data | Germany (EU) | None (intra-EU) |
Changes to this list
Before we add or replace a sub-processor that will process your data, we email affected account owners with the new sub-processor's identity, purpose, location, and transfer mechanism, at least 30 days before it goes live. During that window you may object; if we cannot accommodate the objection you may terminate the affected service. Every change is also recorded as a dated entry below.
- 27 August 2026 — Email delivery moved to Amazon SES (Amazon Web Services EMEA SARL), processing in the eu-central-1 (Frankfurt) region under the AWS DPA and EU Standard Contractual Clauses. MailPace is no longer used.
- 11 June 2026 — Email delivery moved from Resend (US) to MailPace (UK/EU), eliminating the third-country transfer for transactional email.
- 11 June 2026 — Initial publication of this register.