Sub-processors

Who else touches your data.

We use four sub-processors to deliver Tally Digital — and only four. None of them ever see your client data unless it passes through their service as part of an automation we built for you. Here's exactly what each does.

Hetzner Online GmbH

Server hosting

Jurisdiction
Germany (EU)
Data handled
All client data at rest (encrypted) and in motion within Tally infrastructure.
When they touch client data
Always — they host the server your automations run on.
DPA
hetzner.com/AV/DPA_en.pdf

Cloudflare, Inc.

DNS & admin access gate

Jurisdiction
USA (with EU data residency for proxied traffic)
Data handled
Domain name resolution. Authentication metadata for admin logins (your IP + email when we log in to manage your account). No client workflow data is proxied through Cloudflare.
When they touch client data
Never. Sits in front of admin pages only; client-facing webhooks and forms bypass it.
DPA
cloudflare.com/cloudflare-customer-dpa

Brevo (Sendinblue SAS)

Outbound email delivery

Jurisdiction
France (EU)
Data handled
Recipient email address + email content for automated emails sent by your workflows (notifications, invoices, summaries, completion confirmations).
When they touch client data
Whenever your automation sends an email.
DPA
brevo.com/legal/termsofuse (Data Processing Addendum)

Google LLC (Gmail)

Inbound email routing only

Jurisdiction
USA
Data handled
Inbound emails to admin@tallydigital.co.uk — forwarded to a Gmail inbox so we can reply to support requests.
When they touch client data
Never. Only routes Tally's own support inbox; your automation output and form submissions never reach Google.
DPA
workspace.google.com/intl/en/terms/dpa_terms

What we don't use

No, really. That's the whole list.

No analytics provider. No advertising network. No AI training partner. No third-party CDN. No chat widget. No email open-tracker. No session replay. No "free" SaaS swapping your data for the privilege.

Related

Want the bigger picture?

Our Security page covers encryption, access control, breach response, and the legal scaffolding behind these sub-processors. Our Billing & Terms page explains how cancellation and refunds work.