Sub-processors
Every company that processes personal data on our behalf, what each one does, and which country it runs in.
01About this list
These are the third parties that process personal data on our behalf when you use Lumural. All are EU companies. Hetzner and Scaleway operate EU data centres, and nothing in your boards or account leaves the EU/EEA. Creem, which handles payment on paid plans only, is an EU company that uses its own sub-processors outside the EU/EEA under standard contractual clauses — its list is in its DPA at creem.io/dpa.
We update this page at least 30 days before adding or replacing a sub-processor. Workspace owners can subscribe to changes by emailing support@lumural.com.
02Current sub-processors
- Hetzner
- Hetzner Online GmbH, Germany. Application servers, database, self-hosted analytics (Umami) and error monitoring (GlitchTip). Data in Finland and Germany.
- Scaleway
- Scaleway SAS, France. Object storage for uploaded assets and board images; transactional email; encrypted backups. Data in France.
- Payments
- Creem (Armitage Labs OÜ, reg. 16977866), Estonia. Merchant of record and payment processing for paid workspaces. Data in the EU, with sub-processors outside the EU/EEA under standard contractual clauses.
03Not sub-processors
- Umami and GlitchTip are open-source software we run ourselves on Hetzner. No data goes to the projects behind them.
- Search engines may index boards you choose to publish. That is public content, not processing on our behalf.
04Changes
- Version 1. Initial list.