Subprocessors
Last updated: February 14, 2026
This page lists all third-party service providers (subprocessors) that OpenClaw Cloud uses to deliver our services. We notify customers of changes to this list via email.
Infrastructure & Hosting
| Company | Purpose | Location | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Server infrastructure (dedicated servers) | π©πͺ Germany (Nuremberg) | EU company, GDPR native |
| Cloudflare, Inc. | CDN, DDoS protection, DNS | πΊπΈ USA (EU data processing) | EU SCCs, EU-US DPF |
Payments & Billing
| Company | Purpose | Location | Safeguards |
|---|---|---|---|
| Polar.sh | Payment processing, subscriptions | πͺπΊ EU | EU company |
| Stripe, Inc. | Payment processing (via Polar.sh) | πΊπΈ USA | EU SCCs, EU-US DPF |
AI Services (Optional)
| Company | Purpose | Location | Safeguards |
|---|---|---|---|
| OpenRouter | AI API routing (if using credits) | πΊπΈ USA | EU SCCs |
Note: If you bring your own API keys, AI requests go directly to your provider (Anthropic, OpenAI, Google, etc.) β no data passes through OpenRouter.
Analytics & Marketing
| Company | Purpose | Location | Safeguards |
|---|---|---|---|
| Microsoft Clarity | UX analytics, session recordings | πΊπΈ USA | EU SCCs |
| Google Ads | Advertising conversion tracking | πΊπΈ USA | EU SCCs, consent-based |
Communications
| Company | Purpose | Location | Safeguards |
|---|---|---|---|
| Resend | Transactional emails | πΊπΈ USA | EU SCCs |
Changes to This List
We will notify customers at least 14 days before adding new subprocessors. If you object to a new subprocessor, you may terminate your subscription without penalty.
To receive subprocessor change notifications, ensure your account email is current.
Questions?
Contact us at privacy@openclaw.you