SITENCO uses the following providers to deliver Saalz. Some data providers, such as Apollo or Prospeo, are also controllers of their own databases.
Safeguard: what the provider's terms set out. EU: data processed in the European Union. DPF: EU-US Data Privacy Framework certification active on 30 October 2026. SCCs: the European Commission's standard contractual clauses. Adequacy: country recognised by the European Commission.
| Provider | Role | Country and place of processing | Safeguard set out by the provider |
|---|---|---|---|
| Hetzner Hetzner Online GmbH | Platform hosting | Germany (EU) | EU |
| Sentry Functional Software, Inc. | Error monitoring | United States | DPF |
| Postmark AC PM, LLC | Service e-mails (accounts, notifications) | United States | DPF |
| Nylas Nylas, Inc. | Mailbox sync | Company in the United States, data in the United Kingdom | DPF, adequacy (United Kingdom) |
| Apollo.io ZenLeads Inc. | Contact and company search, e-mails, mobiles | United States | DPF |
| ContactOut Being verified | E-mails, mobiles | Being verified | Being verified |
| Datagma INFORMATIONS SASU | E-mails, phones | France, data in the EU, brokers in the United States | EU, SCCs for the United States |
| Dropcontact Dropcontact SAS | E-mails | France, servers in the EU | EU |
| Enrow SCHRUTE FARMS SARL | E-mails, mobiles | France, AWS Paris | EU |
| Prospeo Defastra Tech Inc. | E-mails, mobiles | Canada, hosted in the United States | Adequacy (Canada), vendor's DPA |
| Société Info SMART DATA SAS | Company data, e-mails | France, data in the EU | EU |
| People Data Labs People Data Labs, Inc. | Contact and company search | United States | DPF |
| EmailVerify.io Being verified | E-mail verification | Being verified | Being verified |
| HLR Lookups Velocity Made Good Ltd. | Mobile number checks | Company in Hong Kong, processing in Finland and Germany per its DPA | Processing in the EEA |
| TheirStack THEIRSTACK SL | Job postings, company technologies | Spain, sub-processors in the United States | SCCs |
| DataForSEO DataForSEO OU | Job postings from Google | Estonia, sub-processors in the EU and the United States | Vendor's DPA |
| Apify Apify Technologies s.r.o. | Web collection, public LinkedIn profiles and posts, Google Maps | Czech Republic, processing in the EU and the United States | SCCs |
| HarvestAPI Aventra Technologies Limited | Reading of public LinkedIn posts and their reactions, through Apify | Company in Hong Kong, processing in the United States | SCCs |
| Firecrawl SideGuide Technologies, Inc. | Website reading | United States | Being verified |
| OpenAI OpenAI Ireland Ltd. | AI models | Ireland, processing possible outside the EU | SCCs |
| Anthropic Anthropic Ireland, Limited | AI models | Ireland, storage in the United States | SCCs |
| DeepSeek DeepSeek | Optional AI models, being withdrawn | China | Being withdrawn |
| ElevenLabs Eleven Labs Inc. | Voice generation | United States | DPF |
| Unipile Unipile SAS | LinkedIn account connection | France, proxies in the United States, Singapore and Israel | EU, SCCs and adequacy for the proxies |
| Recall.ai Hyperdoc Inc. | Meeting recording and transcription | Company in the United States, Frankfurt region (EU) | SCCs |
| Provider | Role | Country and place of processing | Safeguard set out by the provider |
|---|---|---|---|
| Google (Gmail, Calendar) Google LLC | Connected mailbox and calendar | United States | DPF |
| Microsoft (Outlook, Calendar) Microsoft Corporation | Connected mailbox and calendar | United States | DPF |
| Ringover SAS BJT Partners | Telephony | France, some sub-processors in the United States | EU, SCCs for the United States |
| Aircall Aircall SAS | Telephony | France, recordings in Frankfurt, other data in Oregon | DPF |
| Skipcall SKIPCALL SAS | Telephony | France, Paris and Amsterdam, some sub-processors in the United States | EU, SCCs for the United States |
| Brevo Brevo SAS | E-mails and SMS | France, support access from India | EU, SCCs for support |
| Mailjet Mailjet (Sinch) | E-mails | Storage in Germany and Belgium, support in the United States | Vendor's DPA |
| Odoo Odoo S.A. | CRM and management | Belgium, data in the EU | EU |
| HubSpot HubSpot France S.A.S. | CRM | France, data in Germany | EU, DPF (HubSpot, Inc.) |
| lemlist LEMPIRE SAS | E-mail sequences | France | EU |
| Instantly Foo Monk, LLC | E-mail sequences | United States | SCCs |
| Provider | Role | Country and place of processing | Safeguard set out by the provider |
|---|---|---|---|
| Stripe Stripe Payments Europe, Limited | Subscription payments | Ireland, transfers to the United States | DPF (Stripe, LLC) |
| Meta Meta Platforms Ireland Limited | Advertising measurement | Ireland, transfers to the United States | Vendor's DPA |
| Mailjet Mailjet (Sinch) | Saalz newsletter | Storage in Germany and Belgium | Vendor's DPA |
| Cloudflare Cloudflare, Inc. | Protection of the saalz.com website | United States, distributed data centres | DPF |
| Bunny.net BunnyWay d.o.o. | Help videos | Slovenia (EU) | Being verified |
Under the Data Processing Agreement (DPA), Saalz informs its clients at least 8 days before adding or replacing a sub-processor, so that they can raise a reasoned objection.