Sub-Processor List
In accordance with Article 28 of the GDPR, Billabex maintains an up-to-date list of sub-processors it engages in the performance of its services. This page is updated whenever a sub-processor changes. Clients who have signed a Data Processing Agreement (DPA) are notified of any changes in accordance with the terms of said agreement.
Category 1: Infrastructure & Core Services
These sub-processors process debtor personal data on behalf of our clients.
| Sub-processor | Services | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting (compute, storage, database), AI processing (Bedrock), Email delivery (SES) | All categories of personal data described in our Privacy Policy: debtor identification data, financial data, communication data | EU (Ireland, eu-west-1) | N/A — data remains within the EU |
| Stripe Technology Europe Ltd | Payment processing for Billabex platform subscriptions | Client billing data (name, email, payment card details — Billabex does not store card numbers) | EU (Ireland) / US | EU-US Data Privacy Framework (DPF) |
Category 2: Analytics & Marketing
Important: These services are used by Billabex in its capacity as data controller for its own website and application analytics. They do NOT process debtor data on behalf of clients and are NOT sub-processors under the DPA.
| Sub-processor | Services | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Google LLC (Google Analytics) | Website audience measurement | Visitor browsing data, anonymized usage statistics | US | EU-US Data Privacy Framework (DPF) |
| Microsoft Corporation (Clarity) | Website session replay and behavioral analysis | Visitor browsing behavior on www.billabex.com | US | EU-US Data Privacy Framework (DPF) |
| Amplitude Inc. | Application usage analytics | Application user interaction data on next.billabex.com | EU | N/A — data hosted in EU |
| Zoho Corporation (Marketing Automation) | Marketing automation, visitor tracking, lead scoring | Visitor and prospect identification and engagement data | US / EU | EU-US Data Privacy Framework (DPF) |
Notification of Changes
If you are a Billabex client with a DPA, you will be notified by email at least 30 days before any change to a Category 1 sub-processor. You have the right to object in accordance with the terms of your DPA.
Contact
For any questions about our sub-processors, contact our DPO via our contact form.