List of Sub-processors
Version of 2026-08-05
Providers engaged by Saubeo SRL to deliver the Hoteo service and operate its platform. Two distinct regimes apply.
Sub-processors (Section 6 of the DPA)
These providers process Customer Data (the data of your own clients) on behalf of your organisation, in accordance with Section 6 of the data processing agreement (DPA). Any addition or replacement is announced at least 14 days in advance (except urgent replacement — see DPA, Section 6).
| Provider | Role | Processing location | Transfer safeguard |
|---|---|---|---|
| OVHcloud (OVH SAS, France) | Hosting of the application and data | European Union | — |
| Brevo (Sendinblue SAS, France) | Sending transactional e-mails and SMS | European Union | — |
| Flowin (Wolters Kluwer Belgium NV/SA) | Peppol network access point (e-invoicing) | European Union | — |
| Ponto (Isabel NV/SA, Belgium) | Bank connection (accounts and transactions) | European Union | — |
| Mistral AI (SAS, France) | AI assistant | European Union | — |
| Veriff OÜ (Estonia) | Identity verification (Peppol activation) | European Union | — |
Providers used by Saubeo for its own processing
For the processing below, Saubeo is the data controller (described in the privacy policy): the DPA notice regime does not apply.
| Provider | Role | Processing location | Transfer safeguard |
|---|---|---|---|
| Stripe Payments Europe Ltd (Ireland) / Stripe Inc. (United States) | Payment of Hoteo subscriptions | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
| Google Ireland Limited | Audience measurement of the public website hoteo.be (Google Analytics 4), only after consent | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
Last review: 2026-08-05. Each provider's commitments (upstream DPA, security) are verified before any addition to this list.