Trust & transparency
Subprocessors & Technical Recipients
A versioned overview of external providers involved in operating the JobDone platform. The providers actually used depend on the agreed operating model, enabled features, and customer-specific integrations.
Two operating models, clearly distinguished
JobDone Cloud
Multi-cloud architecture using components in Switzerland and the European Union. Global platform and delivery services are disclosed individually below.
JobDone Sovereign Cloud
Core platform and primary data storage on Exoscale infrastructure in Zurich. Shared identity, notification, and delivery services are disclosed individually below.
Operating model
Processing or storage region
17 of 17 providers shown
11
Platform subprocessors
Providers processing personal data for infrastructure, identity, storage, delivery, or other platform functions.
| Provider | Operating model | Service and purpose | Processing and storage location | Data categories | Notes |
|---|---|---|---|---|---|
| Direct subprocessorAkenes SA (Exoscale) | JobDone Sovereign Cloud | Cloud infrastructure, Kubernetes, databases, block and object storage, and technical platform services. | Customer, user, personnel, application, document, log, and technical operations data. | Primary infrastructure and data storage for JobDone Sovereign Cloud. | |
| Indirect subprocessorAiven Oy | JobDone Sovereign Cloud | Orchestration and technical administration of database services on Exoscale infrastructure. | Company based in Finland; database instances and business data in the selected Exoscale zone in Zurich; possible technical administration under Exoscale’s contractual terms. | Database, configuration, and technical operations data; possible administrative access where required. | Engaged through Exoscale and subject to its current subprocessor list. |
| Direct subprocessorMicrosoft Azure | JobDone Cloud | Cloud infrastructure, databases, storage, networking, and platform services. | Customer, user, personnel, application, document, log, and technical operations data. | The specific location depends on the system component used. | |
| Direct subprocessorGoogle Cloud | JobDone Cloud | Cloud infrastructure, databases, storage, networking, and platform services. | Customer, user, application, document, log, and technical operations data. | Global Google services such as Firebase Cloud Messaging are disclosed separately. | |
| Direct subprocessorAmazon Web Services (AWS) | JobDone Cloud | Cloud infrastructure, databases, storage, networking, and platform services. | Customer, user, application, document, log, and technical operations data. | The specific location depends on the system component used. | |
| Direct subprocessorWasabi Technologies LLC | JobDone Cloud | Cloud object storage and storage or backup of files and documents. | Files, documents, backups, and technical metadata. | Used only where applicable, with regionally configured storage buckets. | |
| Direct subprocessorWorkOS, Inc. | JobDone CloudJobDone Sovereign Cloud | Central authentication, user management, single sign-on, directory, and identity functions. | Global infrastructure, including possible processing and transfers to the United States. | Name, email address, user ID, organization membership, authentication, session, and technical log data. | No intended storage of working times, absences, payroll data, personnel documents, or comparable business content. |
| Direct subprocessorOneSignal, Inc. | JobDone CloudJobDone Sovereign Cloud | Orchestration and delivery of mobile push notifications. | Primary server infrastructure in the Netherlands; possible international processing and transfers under the DPA and subprocessor list. | Device identifiers, push tokens, application ID, IP address, delivery status, technical metadata, and minimized notification content. | No sensitive business content is included in notification text; final delivery is performed through Apple or Google. |
| Direct subprocessorBunnyWay d.o.o. (bunny.net) | JobDone CloudJobDone Sovereign Cloud | Content delivery network, video streaming, and the storage, processing, and delivery of video and media files. | Storage region in Frankfurt, Germany; delivery through global CDN locations. | Video and media files, technical metadata, IP addresses, and access logs. | Used only where the function is enabled. Geo-replication is disabled for the JobDone storage zone; content may be cached temporarily at CDN locations for delivery. |
| Direct subprocessorCloudflare, Inc. | JobDone Cloud | Content delivery network, reverse proxy, web application firewall, and protection against DDoS and automated attacks. | Global edge infrastructure; configuration primarily on EU and Swiss locations, with possible transfers to the United States under Cloudflare’s contractual data protection mechanisms. | IP addresses, connection and request metadata, technical headers, access logs, and technical operations data. | Traffic is processed at edge locations for delivery and security; no permanent storage of business content. |
| Direct subprocessorTwilio (SendGrid) | JobDone Cloud | Delivery of transactional emails, invitations, and system notifications. | Name, email address, subject, email content, delivery status, and technical metadata. | Not used for regular transactional delivery in JobDone Sovereign Cloud, which uses JobDone-operated email infrastructure on Exoscale in Zurich. |
03
Conditional support & communication providers
These providers are used only when the relevant channel or support function is used.
| Provider | Operating model | Service and purpose | Processing and storage location | Data categories | Notes |
|---|---|---|---|---|---|
| Conditional subprocessorGoogle Workspace | JobDone CloudJobDone Sovereign Cloud | Business email, calendar, video meetings, document exchange, and project or support communication when the corresponding channel is used. | European data region where configured for the relevant services and accounts; certain functions, metadata, and subprocessors may require international processing. | Business contact details, email and communication content, calendar data, meeting data, and voluntarily submitted support information. | Not primary storage for the JobDone platform. Sensitive personnel data should be shared only through explicitly agreed, suitable channels. |
| Conditional subprocessorHubSpot, Inc. | JobDone CloudJobDone Sovereign Cloud | Processing support requests and customer communication where JobDone processes personal data on the customer’s behalf. | Primary EU data region in Germany; possible processing by subprocessors outside the EU under the HubSpot DPA. | Business contact details, support content, communication data, and voluntarily submitted technical information. | Sensitive personnel and health data should not be sent through HubSpot. When used only for CRM and sales, JobDone acts as an independent controller. |
| Conditional subprocessorAircall SAS | JobDone CloudJobDone Sovereign Cloud | Business telephony, support calls, call routing, and communication management. | Name, telephone number, call metadata, and call notes. | Call recording is not enabled for regular support telephony. If enabled in an individual case, participants are informed at the start and applicable legal requirements are observed. |
03
Technically necessary recipients
Providers needed to deliver notifications or email to the recipient’s selected device or mailbox. Their legal role may differ from that of a classic subprocessor.
| Provider | Operating model | Service and purpose | Processing and storage location | Data categories | Notes |
|---|---|---|---|---|---|
| Technical recipientApple Push Notification Service | JobDone CloudJobDone Sovereign Cloud | Delivery of push notifications to Apple devices. | Device and push tokens, application ID, minimized notification content, and technical delivery information. | Technically required platform service for Apple devices; no sensitive business content is included in notification text. | |
| Technical recipientFirebase Cloud Messaging | JobDone CloudJobDone Sovereign Cloud | Delivery of push notifications to Android and supported web devices. | Device and push tokens, application ID, minimized notification content, and technical delivery information. | Technically required platform service for Android devices; no sensitive business content is included in notification text. | |
| Technical recipientRecipient email provider | JobDone CloudJobDone Sovereign Cloud | Delivery of transactional email to the mailbox selected by the user or customer organization. | Email address, subject, email content, and technical delivery information. | Not a subprocessor selected by JobDone. |
International transfers
Where personal data is processed outside Switzerland or the European Economic Area and no recognized adequacy decision applies, JobDone uses appropriate legal, technical, and organizational safeguards. These may include recognized standard contractual clauses and Swiss adaptations, transfer risk assessments, data minimization, encryption, and contractual access restrictions.
Changes to this list
JobDone reviews this list regularly. New or replacement subprocessors are announced under the information and objection procedure in the applicable data processing agreement. A change in legal entity does not count as a new subprocessor when the purpose, processing, and protection level remain materially unchanged.
Services used under JobDone’s own responsibility
Services used solely for JobDone’s own customer relationship, billing, accounting, sales, or CRM are not automatically subprocessors of a customer and are therefore not included in this register unless they process data on that customer’s behalf.