Sub-Processors
Review the list of approved sub-processors used by PONS to deliver platform services with EU/EEA data residency.
Sub-Processors
Europe
PONS is committed to maintaining transparency about the sub-processors involved in delivering our services. All sub-processors listed below are located in the European Union or European Economic Area (EU/EEA), ensuring compliance with GDPR and maintaining the highest standards of data protection for our users.
| Sub-processor | Purpose | Data categories processed | Data residency | Legal entity |
|---|---|---|---|---|
| Azure | Hosting, storage, infrastructure | Personal data in user content | EU/EEA | Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland |
| GCP | Cloud computing, AI processing | Personal data in user content | EU/EEA | Google Cloud EMEA Ltd, 70 Sir John Rogerson's Quay, D02 R296, Dublin 2, Ireland |
| Google Analytics | Website performance tracing | Usage and log data | EU/EEA | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland |
| Stripe | Payment processing | Transaction and billing data | EU/EEA | Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland |
| Auth0 | Authentication | Account and login data | EU/EEA | Okta UK Limited, 100 Liverpool Street, London, EC2M 2AT, United Kingdom |
| OpenAI | AI processing | Personal data in user content | EU/EEA | OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland |
Data Processing and Compliance
Each sub-processor is contractually bound to comply with GDPR requirements and to implement equivalent or superior data protection standards. All agreements include:
- Data Processing Agreements (DPAs) aligned with GDPR Article 28
- Encryption and security requirements matching PONS standards
- Breach notification obligations (within 24 hours)
- Regular security audits and compliance certifications
- Sub-processor monitoring and oversight by PONS
Contact and Changes
For questions about our sub-processors or if you wish to object to the use of a specific sub-processor, please contact us at: security@pons.io
This list is reviewed and updated annually or when changes occur. Any addition of new sub-processors will be communicated to customers at least 30 days in advance with the opportunity to object.
See how PONS works for your team
Get started and we'll show you how PONS fits your workflow.