Sub-processors
Review the approved sub-processors used by PONS to deliver the platform, with EU/EEA data residency.
Sub-Processors
Europe
PONS is committed to maintaining transparency about the sub-processors involved in delivering our services. All sub-processors listed below are located in the European Union or European Economic Area (EU/EEA), ensuring compliance with GDPR and maintaining the highest standards of data protection for our users.
| Sub-processor | Purpose | Data categories processed | Data residency | Legal entity |
|---|---|---|---|---|
| Azure | Hosting, storage, infrastructure | Personal data in user content | EU/EEA | Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland |
| GCP | Cloud computing, AI processing | Personal data in user content | EU/EEA | Google Cloud EMEA Ltd, 70 Sir John Rogerson's Quay, D02 R296, Dublin 2, Ireland |
| Google Analytics | Website performance tracing | Usage and log data | EU/EEA | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland |
| Stripe | Payment processing | Transaction and billing data | EU/EEA | Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland |
| Auth0 | Authentication | Account and login data | EU/EEA | Okta UK Limited, 100 Liverpool Street, London, EC2M 2AT, United Kingdom |
| OpenAI | AI processing | Personal data in user content | EU/EEA | OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland |
Data Processing and Compliance
Each sub-processor is contractually bound to comply with GDPR requirements and to implement equivalent or superior data protection standards. All agreements include:
- Data Processing Agreements (DPAs) aligned with GDPR Article 28
- Encryption and security requirements matching PONS standards
- Breach notification obligations (within 24 hours)
- Regular security audits and compliance certifications
- Sub-processor monitoring and oversight by PONS
Contact and Changes
For questions about our sub-processors or if you wish to object to the use of a specific sub-processor, please contact us at: security@pons.io
This list is reviewed and updated annually or when changes occur. Any addition of new sub-processors will be communicated to customers at least 30 days in advance with the opportunity to object.