SUBVERWERKERS

Subverwerkers

Derde partijen die persoonsgegevens namens PersoHR verwerken, bekendgemaakt op grond van GDPR artikel 28 lid 2.

Laatst bijgewerkt: mei 2026

PersoHR maakt gebruik van de volgende subverwerkers om de dienst te leveren. Elk van hen is gebonden aan een gegevensverwerkingsovereenkomst die gelijkwaardig is aan de verplichtingen die PersoHR in zijn eigen DPA aangaat. Wij informeren de accounteigenaar ten minste 30 dagen van tevoren over elke beoogde wijziging van deze lijst en bieden het recht om bezwaar te maken.

  • Hetzner Online GmbH (Cloud Database)

    Managed PostgreSQL hosting for all application data

    HR app data
    Locatie
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Doorgifte-mechanisme
    EU processing only — no transfer mechanism required
    Categorieën van persoonsgegevens
    • All personal data stored by the platform

  • Hetzner Online GmbH (Object Storage)

    S3-compatible storage for documents, avatars and exports

    HR app data
    Locatie
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Doorgifte-mechanisme
    EU processing only — no transfer mechanism required
    Categorieën van persoonsgegevens
    • Document files
    • Avatar and cover images
    • GDPR data exports

  • Mistral AI

    AI inference for the in-app HR assistant, onboarding suggestions, document analysis and review drafting

    AI inference
    Locatie
    France (EU)
    Registered address
    15 rue des Halles, 75001 Paris, France
    Doorgifte-mechanisme
    EU processing only — no transfer mechanism required
    Categorieën van persoonsgegevens
    • AI prompts and responses
    • Selected employee data only when explicitly included by the user

  • Brevo (Sendinblue SAS)

    Transactional email delivery (welcome, magic-link, notifications, billing)

    Email delivery
    Locatie
    France (EU)
    Registered address
    7 rue de Madrid, 75008 Paris, France
    Doorgifte-mechanisme
    EU processing only — no transfer mechanism required
    Categorieën van persoonsgegevens
    • Recipient email address
    • Recipient first name
    • Email subject and body content

  • Stripe Payments Europe Limited

    Subscription billing, payment processing, invoicing and tax collection

    Billing data
    Locatie
    Ireland (EU) with onward transfer to Stripe Inc., United States
    Registered address
    1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
    Doorgifte-mechanisme
    Standard Contractual Clauses (Decision 2021/914/EU) plus Stripe's additional safeguards
    Categorieën van persoonsgegevens
    • Account owner name and email
    • Billing address and VAT identifier
    • Payment method tokens (no raw card data on PersoHR systems)

  • Plausible Insights OÜ

    Cookieless web analytics for the marketing site and the public-facing app authentication flow. Logged-in app pages are not tracked.

    Web analytics
    Locatie
    Estonia (EU)
    Registered address
    Västriku tn 2, 50403 Tartu, Estonia
    Doorgifte-mechanisme
    EU processing only — no transfer mechanism required
    Categorieën van persoonsgegevens
    • Anonymised IP address (hashed at edge, never stored in raw form)
    • Page URL and HTTP referrer
    • User agent string
    • No cookies, no persistent identifiers, no personal data

DeepL (deepl.com) is used by PersoHR only for offline / development-time translation of system-seeded content (static localisation data and database migration values). No customer personal data is ever sent to DeepL, so it is intentionally not listed above as a sub-processor. If that ever changes we will add DeepL with the appropriate transfer mechanism and notify account owners 30 days in advance per our usual sub-processor change procedure.

Als u per e-mail op de hoogte wilt worden gesteld van wijzigingen in deze lijst, stuur dan een e-mail naar privacy@persohr.eu.