List of Sub-processors
Version of 2026-10-28
Providers engaged by Saubeo SRL to deliver the Hoteo service and operate its platform. Two distinct regimes apply.
Sub-processors (Section 6 of the DPA)
These providers process Customer Data (the data of your own clients) on behalf of your organisation, in accordance with Section 6 of the data processing agreement (DPA). Any addition or replacement is announced at least 14 days in advance (except urgent replacement — see DPA, Section 6).
| Provider | Role | Processing location | Transfer safeguard |
|---|---|---|---|
| OVHcloud (OVH SAS, France) | Hosting of the application and data | European Union | — |
| Brevo (Sendinblue SAS, France) | Sending transactional e-mails and SMS | European Union | — |
| Flowin (Wolters Kluwer Belgium NV/SA) | Peppol network access point (e-invoicing) | European Union | — |
| Ponto (Isabel NV/SA, Belgium) | Bank connection (accounts and transactions) | European Union | — |
| Microsoft Ireland Operations Ltd (Azure) | AI assistant (written and voice conversation, reading of supplier invoices) | European Union (Sweden) | — |
| Veriff OÜ (Estonia) | Identity verification (Peppol activation) | European Union | — |
| Google Ireland Limited (Firebase Cloud Messaging) | Push notifications for the mobile app | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
Providers used by Saubeo for its own processing
For the processing below, Saubeo is the data controller (described in the privacy policy): the DPA notice regime does not apply.
| Provider | Role | Processing location | Transfer safeguard |
|---|---|---|---|
| Stripe Payments Europe Ltd (Ireland) / Stripe Inc. (United States) | Payment of Hoteo subscriptions | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
| Google Ireland Limited | Audience measurement of the public website hoteo.be (Google Analytics 4) and advertising (Google Ads tag: measuring our ads), only after consent; joint controller for the collection for advertising | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
| Meta Platforms Ireland Ltd (Ireland) / Meta Platforms Inc. (United States) | Advertising on the public website hoteo.be (Meta pixel): measuring our ads, only after consent; joint controller for the collection | EU / United States | EU-U.S. Data Privacy Framework + standard contractual clauses |
Last review: 2026-10-28. Each provider's commitments (upstream DPA, security) are verified before any addition to this list.