Sub-processors and providers
Last updated: May 28, 2026
This page lists third-party providers Ciberdime GmbH uses to deliver Shinra Metrics. Some entries are true sub-processors under our DPA. Connected social platforms are listed for transparency and may act as independent controllers or separate platform providers depending on the feature and authorization flow.
We will notify customers of material sub-processor changes at least 15 days in advance via email or in-app notice where the change affects Customer Personal Data processed under our DPA.
Current providers
| Provider | Role | Purpose | Location | Transfer mechanism |
|---|---|---|---|---|
| Vercel Inc. | Infrastructure sub-processor | Application hosting, edge delivery and serverless functions | United States / global infrastructure | SCCs and DPF where applicable |
| OVH SAS (OVHcloud) | Infrastructure sub-processor | Background job runner and cloud infrastructure | Germany / European Union | None required for EU/EEA processing |
| Cloudflare, Inc. / R2 | Storage sub-processor | Object storage for media, clips, thumbnails and generated files | United States / global infrastructure | SCCs and DPF where applicable |
| Tinybird | Analytics sub-processor | Analytics data storage, querying and campaign reporting | European Union / United States | SCCs where transfers occur |
| Resend | Email sub-processor | Transactional and system email delivery | United States | SCCs and DPF where applicable |
| Paddle.com Market Limited and affiliates | Merchant of Record / payment provider | Checkout, subscription billing, invoices, tax and refunds | United Kingdom / United States / global affiliates | SCCs, UK transfer mechanisms and DPF where applicable |
| OpenAI, L.L.C. | AI sub-processor where enabled | OCR, sentiment, embeddings, clip evaluation and derived metadata | United States | SCCs and DPF where applicable |
| Groq, Inc. | Transcription sub-processor where enabled | Speech-to-text processing for livestream or clip audio | United States | SCCs and DPF where applicable |
| Lemonfox | Transcription sub-processor where enabled | Speech-to-text processing for livestream or clip audio | European Union / United States | SCCs where transfers occur |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Connected platform provider | Facebook and Instagram APIs, login, insights and content metadata | European Union / United States | Meta terms, SCCs and DPF where applicable |
| Google LLC / Google Ireland Ltd. | Connected platform provider | Google OAuth, YouTube APIs, analytics and account connection | European Union / United States | Google terms, SCCs and DPF where applicable |
| TikTok Technology Limited / TikTok Information Technologies UK Ltd. | Connected platform provider | TikTok APIs, insights and content metadata | Ireland / United Kingdom / global affiliates | TikTok terms, SCCs / UK IDTA where transfers occur |
| Twitch Interactive, Inc. | Connected platform provider | Twitch APIs, channel analytics, stream metadata and clips | United States | Twitch terms, SCCs and DPF where applicable |
Notifications and objections
Paid customers may object to a new sub-processor on reasonable data-protection grounds within 15 days of our notification. If we cannot reasonably resolve the objection, the customer may terminate the affected service without penalty and receive a pro-rata refund of prepaid fees for the unused period.