SandPlane Subprocessors and Service Providers
Current list: July 22, 2026
Monoceros s. r. o. uses the providers below to operate SandPlane. A provider is a subprocessor only where it processes personal data on behalf of Monoceros for Customer. Customer-directed integrations and independent controllers are identified separately.
| Provider | Purpose | Primary location | Use |
|---|---|---|---|
| Amazon Web Services EMEA SARL / affiliates | Application hosting, PostgreSQL, object storage, email delivery/ingestion, logs, backups, and infrastructure security. | Customer-selected eu-central-1 (Germany) or us-east-1 (USA); limited global support processing. | Core subprocessor |
| Vercel Inc. | Frontend hosting, edge delivery, optional web analytics, and performance measurements. | Global edge network; provider headquartered in the USA. | Core hosting; analytics only after consent |
| PostHog Inc. | Optional product analytics using privacy-filtered events. | Configured EU ingestion and hosting; provider may supply support from other locations. | Only after consent |
| Google Cloud / Google LLC | reCAPTCHA abuse prevention and, only when selected by Customer, Gemini processing. | Global, including USA. | Security; conditional Customer-selected AI |
| Featurebase Oy | In-product support, feedback, and authenticated support identity. | EEA and provider service locations. | Support subprocessor |
| Functional Software, Inc. (Sentry) | Privacy-filtered application error and performance monitoring when enabled. | USA and provider service locations. | Conditional diagnostics subprocessor |
| OpenAI, L.L.C. | Processes selected content only if Customer configures and uses the OpenAI integration. | USA and provider service locations. | Conditional Customer-selected AI |
Independent controller and merchant of record
Paddle.com Market Limited or its applicable affiliate independently processes buyer, checkout, payment, fraud, tax, refund, and billing data as SandPlane's merchant of record. Paddle also sends limited subscription and transaction information to Monoceros so we can provision the Service.
Customer-directed integrations
Stripe, Paddle vendor integrations, OAuth identity providers, commerce platforms, and other services connected by Customer process data under Customer's relationship with them. Monoceros transmits or receives only the data needed for the integration selected by Customer.
Changes
Under the DPA, we publish or notify intended additions or replacements at least 15 days before they begin processing Customer Personal Data where reasonably possible. Data-protection objections can be sent to privacy@sandplane.com during that period.
- July 22, 2026: initial consolidated provider list reflecting the AWS-based SandPlane architecture.