List of Sub-processors

Providers engaged by Saubeo SRL to deliver the Hoteo service and operate its platform. Two distinct regimes apply.

Sub-processors (Section 6 of the DPA)

These providers process Customer Data (the data of your own clients) on behalf of your organisation, in accordance with Section 6 of the data processing agreement (DPA). Any addition or replacement is announced at least 14 days in advance (except urgent replacement — see DPA, Section 6).

Provider	Role	Processing location	Transfer safeguard
OVHcloud (OVH SAS, France)	Hosting of the application and data	European Union	—
Brevo (Sendinblue SAS, France)	Sending transactional e-mails and SMS	European Union	—
Flowin (Wolters Kluwer Belgium NV/SA)	Peppol network access point (e-invoicing)	European Union	—
Ponto (Isabel NV/SA, Belgium)	Bank connection (accounts and transactions)	European Union	—
Microsoft Ireland Operations Ltd (Azure)	AI assistant (written and voice conversation, reading of supplier invoices)	European Union (Sweden)	—
Veriff OÜ (Estonia)	Identity verification (Peppol activation)	European Union	—
Google Ireland Limited (Firebase Cloud Messaging)	Push notifications for the mobile app	EU / United States	EU-U.S. Data Privacy Framework + standard contractual clauses

Providers used by Saubeo for its own processing

For the processing below, Saubeo is the data controller (described in the privacy policy): the DPA notice regime does not apply.

Provider	Role	Processing location	Transfer safeguard
Stripe Payments Europe Ltd (Ireland) / Stripe Inc. (United States)	Payment of Hoteo subscriptions	EU / United States	EU-U.S. Data Privacy Framework + standard contractual clauses
Google Ireland Limited	Audience measurement of the public website hoteo.be (Google Analytics 4), only after consent	EU / United States	EU-U.S. Data Privacy Framework + standard contractual clauses

Last review: 2026-09-18. Each provider's commitments (upstream DPA, security) are verified before any addition to this list.