Sub-Data Processors
Last updated: March 12, 2026
In accordance with GDPR Article 28, the following is a list of sub-processors that QuantumAPI (operated by Kovimatic Limited) uses to provide its services. All customer data is processed and stored within the European Union unless otherwise noted. Sub-processors outside the EU do not process customer data.
| Processor | Purpose | Location | Data Categories | DPA |
|---|---|---|---|---|
| Scaleway | Cloud infrastructure (Kubernetes, PostgreSQL, S3 storage) | France & Netherlands | All platform data (encrypted at rest) | View |
| Mollie | Payment processing | Netherlands | Billing data, company name, VAT ID | View |
| GitHub (GHCR) | Container image registry | United States | Docker images only (no customer data) | View |
| Let's Encrypt | TLS certificate issuance | United States | Domain names only (no customer data) | View |
We will notify customers at least 30 days before adding or changing a sub-processor. Customers can object to changes by contacting us at the email below.
For questions about our sub-processors, contact us at: it@kovimatic.ie