Assessment Questionnaires uses service providers to host, secure, maintain, and communicate through the platform. This page summarises the categories of subprocessors used to provide the service.
Current subprocessors
- Hetzner Online GmbH: hosting, compute, storage, database infrastructure, backups, networking, and related server infrastructure. Data processed may include account data, assessment records, questionnaire responses, attachments, generated content, logs, and technical metadata. Hosting is generally in Germany/EU locations selected for the service.
- Resend: transactional email delivery for assessment links, notifications, password or access emails, and service messages. Data processed may include recipient email addresses, message content, delivery status, and email metadata.
Controlled worker environments
Where background generation is enabled, assessment data may be processed by a controlled worker environment for the purpose of generating draft background content. The worker uses authenticated platform APIs and is intended to process data only for the generation task. If a third-party model API is used in future, that provider should be added to this subprocessor list before use.
Service categories
- Hosting and infrastructure: cloud servers, databases, storage, backups, networking, and deployment infrastructure.
- Email delivery: transactional email services used to send assessment links, notifications, and service messages.
- Domain, DNS, and security services: services used to route traffic, manage certificates, verify domains, and protect availability.
- Support and maintenance tools: tools used by authorised administrators to diagnose issues, respond to support requests, and maintain the service.
Changes
Subprocessors may change as the platform develops. Material changes should be reflected on this page or notified to affected customers where required by contract or law.
Customer responsibility
Customers should consider these subprocessors as part of their own privacy information, professional obligations, and DPIA or risk assessment where applicable.