OVHcloud — infrastructure
Service category: hosting and infrastructure. The data-processing scope depends on which OVHcloud services STRG deploys. It may include hosted application or object data, associated metadata and operational logs where those services handle them.
Location and entity: determined by the contracted service, selected data-center region and applicable OVHcloud group entity. This page does not assert that every region advertised by STRG runs on OVHcloud or that all OVHcloud processing is confined to the EU.
Provider information: OVHcloud data protection. The applicable processing agreement must match STRG’s actual OVHcloud contract.
Cloudflare — delivery and security
Service category: web delivery, network security and related hosting services where enabled. Depending on the services configured, processing may include IP addresses, request headers, request content, security events, logs and hosted application data.
Location and entity: Cloudflare operates a global network. Processing and support access depend on the products and regional controls configured for STRG; selecting an EU storage bucket is not a promise of EU-only Cloudflare processing. The applicable contracting entity and transfer arrangements are those in STRG’s Cloudflare agreement.
Provider documents: Cloudflare Data Processing Addendum and data protection information.
Stripe — payments and billing
Service: payment collection, billing and related fraud prevention. Data: payer identity and contact details, billing address, invoice and transaction information, and payment-method data supplied during payment. Customer bucket contents are not needed for this purpose.
Stripe may act as processor for instructed payment services and as independent controller for activities such as legal compliance and fraud prevention. Its use for billing does not make it a subprocessor of all customer-stored data. Applicable entity, locations and safeguards depend on STRG’s Stripe agreement.
Provider documents: Privacy policy and Data Processing Agreement.
Disclosure scope
Only providers that process personal data in the relevant service need to be included in its processing schedule. Infrastructure providers are subprocessors where they process Customer Personal Data on STRG’s behalf. This register does not authorize an undisclosed AI model provider: any such provider receiving prompts, object content or other Customer Personal Data must be assessed and disclosed before use.
Authorization and provider changes
The Data Processing Agreement provides for written authorization, contractual safeguards and 30-day advance notice of additions or replacements of customer-data subprocessors. Those terms form part of the customer agreement where STRG processes personal data on the customer’s behalf.
Processing details
Contact for information about applicable contracting entities, processing locations, service scope and transfer safeguards.