Sous-traitants.

Toutes les entreprises que nous mobilisons et qui peuvent traiter des données personnelles, leur rôle et le lieu du traitement.

Ce document est fourni en anglais. Nous ne publions pas de traduction de nos documents juridiques ; le texte anglais fait foi.

About this list

A sub-processor is a company we engage to help deliver HotelOS that may handle personal data in the process. This page lists every one of them, what it does for us, and where it processes data. It is the list referenced by the Data Processing Agreement at /legal/dpa.

Each sub-processor is security-reviewed before onboarding and bound by a written contract with data protection obligations no less protective than our own. We stay fully responsible to you for their performance.

Current sub-processors

Sub-processor	What it does for us	Where it processes data
Cloudflare, Inc.	Hosting, content delivery, edge compute, DNS and denial-of-service protection.	Global edge network; request routing honours the tenant's elected region for stateful workloads.
Supabase, Inc.	Managed Postgres databases, authentication and object storage — the primary store for workspace data.	Region-pinned to the tenant's elected residency: United States (Virginia), European Union (Frankfurt) or Asia-Pacific (Singapore).
Stripe, Inc.	Subscription billing and payment processing for HotelOS invoices. Card data is entered directly with Stripe and never reaches our systems.	United States, with EU processing for European customers.
Resend (Plus Five Five, Inc.)	Transactional email — sign-in links, notifications, and messages the platform sends on a hotel's behalf.	United States.
PostHog, Inc.	Product analytics and session diagnostics, configured without advertising or cross-site tracking.	United States.
Google LLC	Google Workspace single sign-on for staff accounts, and business email for our own correspondence.	United States.
Intuit Inc. (QuickBooks)	Accounting synchronisation — only where a customer connects its own QuickBooks account.	United States.
AI model providers, accessed through our gateway	The reasoning behind AI-assisted features. Content sent to a model is processed to return a result and is not used to train models.	United States. The specific providers in use are named in the trust pack, available under NDA.

Systems you connect yourself

HotelOS integrates with property management, payment, accounting and messaging systems that you already run. Those systems are not our sub-processors — you hold the relationship and the contract, and we exchange data with them at your instruction using your credentials. QuickBooks appears above because the connection runs through our infrastructure; the same logic applies to any other integration we operate on your behalf.

How we announce changes

Before adding or replacing a sub-processor we email account owners at least 30 days in advance and update the date at the top of this page. Within that window you may object on reasonable data protection grounds; if we cannot offer a workable alternative, you may terminate the affected service and get back the fees paid for the unused portion of your term.

To be added to the notification list, or to ask anything about a sub-processor, write to [email protected].

Autres documents juridiques

Des questions sur ce document ?

Les questions de protection des données et de contrat sont traitées par une personne, pas par une file d'attente. Écrivez-nous : nous répondons sous un jour ouvré.

01About this list

02Current sub-processors

03Systems you connect yourself