Version 1in force since 19 October 2026
Subprocessors
The companies Bayloop uses to run the service, each only for its part.
How this list works
We tell workshops at least 30 days before we add or replace a company here (the Data processing agreement, section Subprocessors). The date of each version is at the top.
Hosting and backups
- Hetzner Online GmbH, Germany: the servers (Germany) and the backup storage (Finland). Everything a workshop keeps in Bayloop. EU.
Network and security
- Cloudflare, Inc., USA: the network in front of Bayloop, its addresses and the robot check on forms. The traffic passes through it, encrypted. EU-US Data Privacy Framework and standard contractual clauses.
Email and SMS
- Brevo (Sendinblue SAS), France: sending email and SMS, the address and the message. EU.
The assistant
- Google LLC (Gemini API), USA: the AI behind the assistant (an AI Service Provider in the Terms, clause 10.5), the text it is given to read or answer. Paid terms under which Google does not train its models on the data. EU-US Data Privacy Framework and standard contractual clauses.
Payments
- To be confirmed before card payments start: the Payment Service Provider that processes Bayloop's fees (Terms, clause 9.1). Payment card details go to it directly and are not stored by Bayloop.
Messaging, when a workshop connects it
- Meta Platforms Ireland Ltd, Ireland: WhatsApp, Instagram and Messenger messages of the workshops that connect them. EU, with Meta's own transfers under the Data Privacy Framework.
- Telegram FZ-LLC, United Arab Emirates: alerts and copies to the team members who connect Telegram, the alert's text. Standard contractual clauses.