List of subprocessors engaged · Last updated: 11 July 2026
Furnify3D uses the following providers to deliver, secure, analyse, communicate and bill the Service. Depending on the functions used, not all providers are engaged for every customer. Data processing agreements under Art. 28 GDPR are in place with processors.
| Provider | Purpose | Data categories | Location / processing | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting, servers, object storage | server/log data, account, usage, upload and result data | Germany (Falkenstein/Nuremberg) | EU — no third-country transfer |
| Vercel Inc. | Frontend hosting, CDN/edge, serverless functions | IP address, request/log data | USA + global edge network | EU-U.S. DPF; SCCs as a fallback |
| Supabase Inc. | Authentication, database | account/login data, user roles, metadata | EU region (Frankfurt); support access from the USA possible | EU-U.S. DPF; SCCs as a fallback |
| Stripe Payments Europe Ltd. / Stripe, Inc. | Payment processing, billing | payment, invoicing and transaction data | Ireland/EU + USA | Partly independent controller for payment processing; EU-U.S. DPF; SCCs |
| Usercentrics A/S (Cookiebot) | Consent management | consent state, truncated IP address | Denmark (EU) | EU — no third-country transfer |
| InnoCraft Ltd (Matomo Cloud) | Web analytics (cookieless) | truncated IP, landing-page usage data | New Zealand (provider); hosting in the EU | New Zealand — EU adequacy decision |
| Functional Software, Inc. (Sentry) | Error diagnostics (backend) | IP address, timestamp, technical error details | EU region (Germany, ingest.de.sentry.io); provider USA | EU-U.S. DPF; SCCs as a fallback |
| Grafana Labs (Grafana Cloud) | System monitoring | aggregated technical metrics (usually no personal data) | EU region (London, eu-west-2); provider USA | EU-U.S. DPF; SCCs as a fallback |
| Plus Five Five, Inc. (Resend) | Transactional emails | email address, message content | USA | EU-U.S. DPF; SCCs as a fallback |
Furnify3D informs contractual customers of new or replaced subprocessors at least 30 days in advance in accordance with the applicable data processing agreement (DPA).
Customers may object to a new subprocessor within the period stated in the DPA on reasonable, data-protection-related grounds. Requests: info@furnify3d.com.
This list also forms an annex to the Data Processing Agreement (DPA).
The embedded pCon.catalog of EasternGraphics GmbH is an independent controller, not a subprocessor (see Privacy Policy). Polygon reduction (InstaLOD) runs on our own Hetzner server without an additional third-country transfer. A newsletter/CRM provider will be added once finalised.