Sub-processors
Last updated: May 2026
KimonTime uses the third-party services below to deliver the product. Each has signed a Data Processing Agreement (DPA) or equivalent. We update this list when sub-processors change; enterprise customers under contract receive 30-day advance notice.
| Sub-processor | Purpose | Region |
|---|---|---|
| Hostinger | Hosting (VPS, application servers, Postgres + Valkey) | UK (London) — EU optional |
| Backblaze B2 | Object storage (screenshots, exports) | EU (Amsterdam) |
| Cloudflare | DNS, CDN, WAF, DDoS protection | Global |
| Stripe | Billing, payments, VAT calculation | EU (Ireland) for European customers |
| Resend | Transactional + alert email delivery | EU (Frankfurt) by default |
| Anthropic | AI Time Reconstruction, Productivity Coach, Burnout Prediction | US — Anthropic GDPR DPA signed; data processed under SCC |
Anthropic processes data only when an authorised user invokes an AI feature (Time Reconstruction, Productivity Coach, Burnout Prediction). Each invocation is opt-in at the organisation level and audit-logged.
The canonical sub-processor list is maintained in our internal compliance documentation (compliance/COMPLIANCE.md) — this page mirrors it.