Infrastructure & hosting
- Hetzner Online GmbH — Application server and database hosting. Location: Germany (EU). Data: application database, logs, backups.
- Cloudflare, Inc. — Content delivery network (CDN), web application firewall (WAF), object storage (R2) for uploaded files, browser rendering for PDF generation, and Turnstile CAPTCHA. Location: Global (USA + edge). Data: IP addresses, request headers, uploaded documents.
Email & SMS — customer-configured
- Customer SMTP provider — Outbound email (notifications, invoices) is sent via the SMTP credentials the customer configures in their account settings. LiftGrid does not operate a shared email relay; each tenant's chosen provider processes that data under the customer's own agreement.
- Twilio Inc. — SMS delivery for OTP verification and system notifications — available when the customer configures Twilio as their SMS provider. Location: USA. Data: phone number, message content.
- NetGSM (Genel Mobil İletişim A.Ş.) — SMS delivery for OTP verification and system notifications — available when the customer configures NetGSM as their SMS provider. Location: Turkey. Data: phone number, message content.
Payments
- PayTR Ödeme Hizmetleri A.Ş. — Payment processing. Location: Turkey. Data: billing details, payment transaction references. Card data is processed by PayTR directly and not stored by LiftGrid.
Monitoring & error tracking
- Sentry (Functional Software, Inc.) — Application error tracking and performance monitoring. Location: USA. Data: error messages, stack traces, request context. PII scrubbing is configured to minimize personal data in error reports.
Analytics
- Google Analytics (Google LLC) — Website analytics for the marketing site, used only with your consent. Location: USA. Data: anonymized page views, session data, device/browser type.
Changes to this list
We will notify customers of any new sub-processor addition or material change with at least 30 days' notice via email or in-app notification, allowing time to object if needed.
See also our Data Processing Agreement.