Sub-processors
Last updated: April 2026
Flokk uses the following third-party sub-processors to deliver the managed PostgreSQL service. All sub-processors are European-headquartered or operate exclusively within the EU. No personal data is transferred outside the European Economic Area.
| Sub-processor | Purpose | Location |
|---|---|---|
| UpCloud Ltd | Infrastructure: compute, block storage, object storage, Kubernetes | Helsinki, Finland |
| Mollie B.V. | Payment processing: subscriptions, invoices, refunds | Amsterdam, Netherlands |
| deSEC e.V. | DNS hosting and DNSSEC (no personal data processed) | Berlin, Germany |
Self-hosted components
The following open-source components run on our own infrastructure (UpCloud, Frankfurt) and do not involve any external data processing:
- Ory Kratos — identity and authentication. Self-hosted; no data leaves our cluster.
- CloudNativePG — PostgreSQL operator. Runs in our Kubernetes cluster.
- ArgoCD — GitOps deployment. Accesses our private git repository only.
- PgBouncer — connection pooling. Runs alongside each PostgreSQL cluster.
Change notification
We provide at least 30 days written notice before adding a new sub-processor. Notifications are sent via email to the account owner and displayed as a banner in the dashboard. You may object within the notice period; if the objection cannot be resolved, you may terminate the affected service without penalty.
Contact
Sub-processor inquiries: privacy@flokk.dev