Sub-processors
Sidst opdateret: August 23, 2026
When you use CookieBeam, Armin Zaribaf acts as a processor for the personal data of your website visitors, and engages the sub-processors below to deliver the service. This list is maintained under Article 28(2) GDPR.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Payment processing, subscription billing and invoicing | Customer name, billing email, billing address, VAT/tax ID, payment method (card data never reaches CookieBeam) | Ireland (EU), with onward transfer to Stripe, Inc. (USA) under SCCs |
| Oracle Cloud Infrastructure | Application hosting, database hosting and CDN object storage | All application data at rest, including account records and consent logs | EU region |
| Cloudflare, Inc. | DNS, CDN and edge protection for the consent script | Visitor IP address and request metadata in transit; not retained by CookieBeam | Global edge network, EU-first routing |
| Amazon Web Services, Inc. | Serverless execution of the cookie scanner (Lambda) | Public URLs of customer websites submitted for scanning; no end-visitor personal data | EU region |
| Resend, Inc. | Transactional email delivery (billing, authentication, DSAR and digest notices) | Recipient email address and message content | USA, under SCCs |
| Functional Software, Inc. (Sentry) | Application error monitoring and session replay | Error diagnostics, IP address, and replayed dashboard interactions of CookieBeam account holders | USA, under SCCs |
Changes to this list
We will give customers notice before a new sub-processor begins processing personal data, so that you have an opportunity to object as provided in our Data Processing Agreement.
Questions or objections: [email protected] · Data Processing Agreement