Last updated: 28 June 2026
This page lists the sub-processors that Tilizy Digital S.R.L. uses to provide its managed-hosting and related services, as referenced in our Data Processing Agreement. A sub-processor is a third party we engage to process our clients' personal data on their behalf.
We keep this list current and will give reasonable prior notice of intended additions or replacements, through this page and by email to the client's designated contact, so that clients can object on reasonable data-protection grounds.
Current sub-processors
| Sub-processor | Service provided | Location | Notes |
|---|---|---|---|
| Hetzner Online GmbH | Cloud and dedicated server infrastructure (compute, storage, network) for hosted websites and applications | Germany / Finland (EEA) | Art. 28 terms; EEA processing by default |
Email for hosted clients is currently delivered from our own self-hosted mail infrastructure within the EEA (no third-party email sub-processor).
Regional hosting on request
For clients or audiences outside the EU (for example North America or Asia), we can provision hosting infrastructure in the relevant region on the client's instruction. In that case the regional infrastructure provider acts as an additional sub-processor for that engagement, with appropriate safeguards under Chapter V GDPR, and is identified in the client's Service Agreement.
AI tools
We use AI-assisted development tools on code and non-personal material only. We do not input our clients' personal data into AI tools. Accordingly, such tools do not process client personal data on our behalf and are not sub-processors. Should this ever change, any AI tool used to process client personal data would first be placed under a data-processing agreement with zero-retention and no-training settings, listed here, and its transfer safeguards documented.
Not sub-processors (for reference)
These parties do not process our clients' hosted personal data on our behalf, so they are not in the list above:
- Our external accounting firm processes Tilizy Digital's own business data (client contact and billing details) for invoicing and statutory accounting. It is a processor of our own controller data and is covered in the Privacy Policy, not here.
- Locally used data sources (for example an IP-geolocation database downloaded and queried on our own servers) involve no disclosure of personal data to a third party.
How we keep this accurate
We review this list whenever we add a tool or provider that could touch client personal data. If you are unsure whether something is a sub-processor, the test is simple: does a third party receive or have access to your clients' personal data in order to help us run the service? If yes, it belongs here.
Contact
Questions about sub-processors: privacy@tilizy.com.