Roles and access
A provider is a workload subprocessor only when it processes your application’s personal data on Codara’s instructions. Billing, identity and website analytics have separate roles; some providers also act as independent controllers under their own notices. This register does not mean every provider receives your code, database contents or secrets.
Current providers
Hetzner Online GmbH
Servers, networking and block storage that run customer apps, databases, persistent volumes, builds and the platform itself
European Union (Helsinki, Finland)
Cloudflare, Inc.
DNS, TLS, CDN, DDoS protection, Cloudflare Tunnel and custom hostnames; R2 object storage for backups, logs, build uploads, customer buckets and the registry holding the container images Codara builds from your code
R2 data in the European Union (R2 EU jurisdiction); edge network worldwide, with contractual safeguards for restricted transfers
Microsoft Corporation
Transactional email and Codara’s Microsoft 365 mailboxes, including support ticket notifications
European and global service regions
Stripe / Link
Checkout, merchant-of-record sales where selected, invoices, tax, fraud checks and payment support; independent controller where applicable
European Union, United States and other service regions; relevant entity shown in Stripe/Link terms
GitHub, Inc.
GitHub sign-in and the repository integration you choose; it does not store your built images or runtime data
United States and global service regions
Google (Google Ireland Limited / Google LLC)
Optional Google sign-in and consented Google Analytics measurement
European Union and global service regions
Discord (Discord Netherlands BV / Discord Inc.)
Optional Connect Discord for the beta Discord offer and the Codara Community server, as an independent controller for your Discord account; private staff alerts for support tickets with only the ticket number, topic and link
United States and global service regions; Discord Inc. is certified under the EU-U.S. Data Privacy Framework
PostHog, Inc.
Consented website/product analytics and session replay; does not host customer workloads
European Union analytics hosting; international support/access subject to applicable safeguards
Updates and choices
Not every provider receives every customer’s data. GitHub and Google identity processing occurs only when that sign-in or integration is selected; Stripe receives data when billing is activated; Discord receives your data only if you connect Discord. PostHog and Google measurement are used only for the purposes enabled by your privacy choices. Intended additions or replacements of workload subprocessors are notified to account owners in advance, with an opportunity to object as described in the DPA. Customers may raise a reasonable data-protection objection at cloud@codaracloud.com.