In accordance with Article 28 of the GDPR, Billabex maintains an up-to-date list of sub-processors it engages in the performance of its services. This page is updated whenever a sub-processor changes. Clients who have signed a Data Processing Agreement (DPA) are notified of any changes in accordance with the terms of said agreement.
Category 1: Infrastructure & Core Services
These sub-processors process debtor personal data on behalf of our clients.
| Sub-processor | Services | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting (compute, storage, database), AI processing (Bedrock), Email delivery (SES) | All categories of personal data described in our Privacy Policy: debtor identification data, financial data, communication data | EU (Ireland, eu-west-1) | N/A (data remains within the EU) |
Category 2: Analytics & Marketing
Important: These services are used by Billabex in its capacity as data controller for its own website and application analytics. They do NOT process debtor data on behalf of clients and are NOT sub-processors under the DPA.
| Sub-processor | Services | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Google LLC (Google Analytics) | Website audience measurement | Visitor browsing data, anonymized usage statistics | US | EU-US Data Privacy Framework (DPF) |
| Microsoft Corporation (Clarity) | Website session replay and behavioral analysis | Visitor browsing behavior on www.billabex.com | US | EU-US Data Privacy Framework (DPF) |
Notification of Changes
If you are a Billabex client with a DPA, you will be notified by email at least 30 days before any change to a Category 1 sub-processor. You have the right to object in accordance with the terms of your DPA.
Contact
For any questions about our sub-processors, contact our DPO via our contact form.