Legal
Subprocessors
Effective 2026-05-28
Cantila uses the third parties below to provide the service. Each handles a specific slice of customer data under written contractual terms (DPA, SCCs where applicable). Cantila notifies controllers at least 30 days before adding a new subprocessor — see DPA §5.
| Subprocessor | Purpose | Region | Status |
|---|---|---|---|
| Hetzner Online GmbH | Compute, networking, storage — the underlying VPS fleet for Cantila Host and Cantila Data. | Germany (FSN1, Falkenstein) / Finland (HEL1) / US (ASH) | Live |
| Stripe Payments | Payments processing, subscription billing, invoice generation, dunning. | Ireland (EEA) / US | Live |
| Cloudflare, Inc. | Authoritative DNS for cantila.app and customer-delegated DNS zones. | Global anycast | Live |
| Tucows / OpenSRS | Domain registrar backend for Cantila Domains. | Canada / Global | Live |
| Anthropic, PBC | Claude API access for the Cantila Deploy assistant and Cantila Agents' brain (when the customer opts into Claude-backed analysis). | US | Live |
| Mailcow (self-hosted) + dedicated SMTP IPs | Outbound and inbound mail delivery for Cantila Mail. | Hetzner FSN1 — runs on Cantila infrastructure; no third-party email relay. | Phase 2 |
| Telnyx / Bandwidth (under evaluation) | Carrier interconnect for Cantila SMS — SMS delivery, inbound routing, A2P/10DLC registration. | US / Global | Phase 3 |
How to subscribe to changes
Email legal@cantila.app with the subject "subprocessor notice" and you'll be added to the notification list. Changes are also surfaced in the changelog.