Sub-processors
Current as at 6 September 2026. These are the third parties WIKI-TECH LIMITED engages to deliver Parity Backup. This page is Annex III to our data processing agreement.
1. Sub-processors we engage
| Sub-processor | What it does for us | Data it can reach | Where it processes |
|---|---|---|---|
| Cloudflare, Inc. United States, EU points of presence | DNS, CDN and web application firewall in front of the website and the portal. It terminates TLS, so every request reaches us through it. | All HTTP traffic in transit, which includes anything a portal page shows or a form submits: sign-in credentials, mailbox subjects, file and site names. Nothing is stored there beyond short-lived caching and request logs, and no backup content is held by it. | A global anycast network. Requests from Europe are served by European points of presence, and DNS is answered from whichever location is nearest. |
| Hetzner Online GmbH Germany | Hosting for the application and database, and the object storage that holds backup content | All backup content and its index, as stored data. Hetzner has no application access and no reason to read it. | Helsinki, Finland (application, database, backup content). Falkenstein, Germany (the off-site copy of the nightly database backup only). |
| Stripe Payments Europe, Ltd. Ireland | Card payments, invoicing and tax calculation | Billing contact name and email, company, billing address and card details. No backup content, ever. | European Union, with onward transfer to Stripe, Inc. in the United States under its own transfer safeguards |
| SMTP2GO New Zealand, EU infrastructure | Sending transactional email: verification, password reset, backup failure alerts, billing notices | Recipient email address and the content of that email, which names the customer and the affected tenant. No backup content. | European Union. We send through their EU endpoint (mail-eu.smtp2go.com) rather than the global one. |
2. Storage you choose yourself
The table above is our standard arrangement, and it is what the published price assumes. Where a customer needs backups held with a different provider or in a different region, for example Azure or Wasabi, we agree that in writing and the order names the provider, the location and the price. A provider engaged that way is a sub-processor for that customer’s data alone, so it does not appear on this page, which describes the arrangement that applies to everybody else. Ask us if you need this.
3. Microsoft is not our sub-processor
Microsoft appears in this discussion often enough to be worth stating plainly: Microsoft 365 is your platform, under your own agreement with Microsoft, and we do not engage them. We read from your tenant using access you grant by application consent and can revoke at any time. Microsoft is a sub-processor of yours, not of ours.
4. Changes to this list
We will give at least 30 days’ notice to the billing contact on each account before a new sub-processor begins processing customer personal data. If you reasonably object on data protection grounds within that period, you may terminate the affected part of the Service without penalty and we will refund any fees paid in advance for the period after termination.
Changed 6 September 2026: Cloudflare added. Cloudflare has carried the website and the portal since they were first published and this table did not name it, so this entry corrects the list rather than announcing a new engagement: no party began processing on this date. The 30 days’ notice above applies to every addition from here.
5. Contact
Questions about this list: [email protected] · WIKI-TECH LIMITED, 21 Curzon Road, Maidstone, Kent ME14 5BB