Sub-processors
To run EO-Atlas, SpectraWorks B.V. relies on a few third-party providers. Each handles personal data under a data-processing agreement. Most act only on our instructions; Stripe also acts as its own controller for part of what it does, such as fraud prevention. This is the current list.
| Processor | What it does | Data involved | Where |
|---|---|---|---|
| Stripe | Payment processing and billing for paid subscriptions. | Billing details, transaction records. Card data is handled by Stripe and never reaches us. | EU / United States (EU-U.S. Data Privacy Framework + SCCs). |
| Cloudflare | Website hosting, content delivery, and security (the site runs on Cloudflare Workers and D1). | IP address and request metadata, security logs, account and catalogue data at rest. | Global edge / United States (EU-U.S. Data Privacy Framework + SCCs). |
| Resend | Delivery of transactional email, such as sign-in codes. | Email address and the content of transactional messages. | United States (Standard Contractual Clauses). |
We update this list when we add or change a processor. For the wider picture of what we collect and why, see our Privacy Policy.
Last updated: 5 June 2026