Subprocessors
Last updated: August 10, 2026
Transcodely uses a small number of third-party vendors (“subprocessors”) to host, process, and deliver the service. Each is bound by a data processing agreement and receives only the data its specific function requires. This page is the authoritative list; the Privacy Policy and Data Processing Agreement refer to it.
Core infrastructure (EU)
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Google Cloud (Google Ireland Ltd.) | API hosting (Cloud Run) and internal job messaging (Pub/Sub) | Account and usage metadata; job messages | EU — Belgium (europe-west1) |
| Neon Inc. | Primary database (serverless Postgres, hosted on AWS) | Account data, job/video metadata, usage ledger, request logs | EU — Frankfurt, Germany (eu-central-1) |
| Hetzner Online GmbH | Transcoding compute fleet and managed object storage | Source and output video files; audio processed for opt-in AI captions | EU — Germany (Falkenstein, Nuremberg) and Finland (Helsinki)* |
* In an EU-wide capacity shortage, transcoding may exceptionally overflow to Hetzner’s US locations (Ashburn, Hillsboro). This failover is disabled by default and has to be deliberately enabled by us during such an event.
Delivery, payments & platform services
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| BUNNYWAY d.o.o. (bunny.net / BunnyCDN) | Global CDN delivery of hosted video | Delivered output media; viewer request metadata (IP address, user agent) | EU headquarters (Slovenia); global edge locations |
| Polar Software Inc. (Polar.sh) | Payments — merchant of record: checkout, invoicing, VAT/sales-tax handling | Billing email, organization name, usage-derived charges; payment details are collected by Polar directly and never touch our systems | United States |
| WorkOS Inc. | Dashboard sign-in and authentication | Email, name, profile picture URL, authentication metadata | United States |
| Vercel Inc. | Hosting of the website and dashboard; cookieless, aggregate web analytics | Request metadata (IP address, user agent) as inherent to serving web traffic; aggregate page metrics | United States; global edge network |
| Functional Software Inc. (Sentry) | Error monitoring and diagnostics | Scrubbed error events — cookies, query strings, and request bodies are stripped before sending; on dashboard errors, a masked session replay | USA (data hosted in Sentry’s EU region, Germany) |
| Anthropic PBC | Auto-chapter generation (opt-in, per job) | Caption transcript text and video duration only — never audio, video, or account metadata | United States |
| Web3Forms | Contact-form delivery to our inbox | Name, email, and message you type into the contact form | United States |
Storage you connect yourself
If you connect your own storage as an origin or output destination (for example your own Amazon S3, Google Cloud Storage, Cloudflare R2, or HTTP origin), that provider is your vendor, not our subprocessor: we access it only on your instruction, using credentials you supply, and your agreement with that provider governs the data stored there.
Transfers outside the EEA
For subprocessors located in the United States, transfers are protected by the EU–US Data Privacy Framework where the vendor is certified, and otherwise by the European Commission’s Standard Contractual Clauses. See the Privacy Policy, Section 8.
Changes to this list
Before adding or replacing a subprocessor that processes customer content or personal data, we update this page and give notice as described in the Data Processing Agreement (at least 14 days in advance), so you can review the change and object. Questions: admin@transcodely.com.