LegalDPA
Data processing agreement
Signups open soon. Email hello@remixcloud.com to join now. We reply within one business day and tell you when your plan can start.
Last updated 31 October 2026.
A data processing agreement (DPA) under Art. 28 GDPR is available on request: email hello@remixcloud.com and we send you the current version to review and sign.
Where your data is processed
Customer content, meaning your workloads, volumes, databases, buckets and their backups, is stored and processed in the EU. Billing and account email use the processors named in the privacy policy, under the safeguards named there.
Subprocessors
| Provider | Purpose | Data concerned | Location | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Servers for the platform and your services | Your workloads, volumes, databases and buckets | Finland | EU |
| Hetzner Online GmbH | Off-site backups | Backups of your services | Germany | EU |
| BunnyWay d.o.o. | Authoritative DNS | DNS records for your tenant's host names | Slovenia | EU |
| Stripe Payments Europe, Limited | Payments and invoices | Billing contact and payment data, not your workloads | Ireland, with transfers to Stripe, Inc. in the United States | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
| Plus Five Five, Inc. (Resend) | Account email | Email address and the content of account emails | United States | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
Changes to subprocessors
We tell customers before we add or replace a subprocessor. You may object to the change under Art. 28(2) GDPR. When we add a region or provider, this list is updated before it carries customer data.
Technical and organisational measures
- Each customer gets a tenant with its own resource limits and network rules.
- Our servers run Talos Linux, with no shell and no SSH. They change only through an authenticated API.
- Every night, the platform and the volumes of your managed services are backed up to storage apart from the services they protect, in the EU. Each backup is kept for 30 days and locked against changes for its first 7.
- Once online signup opens, sessions for your account are tied to app.remixcloud.com alone, and the account refuses changes sent from other websites.
- Card details go straight to Stripe. We never see or store card numbers.