Sub-processors
Last updated: June 18, 2026
WGRD Technologies BV (“we”, “our”, or “us”) engages the third-party service providers listed below as sub-processors to help us operate, provide, and improve the Service. This page identifies each sub-processor, the nature and purpose of its processing, the location where personal data is processed, and the transfer mechanism relied on where personal data is transferred outside the European Economic Area (EEA).
Transfers outside the EEA
Our primary processing of personal data takes place within the European Union. For sub-processors that process personal data in the United States, we rely on one or both of the following safeguards under Chapter V of the GDPR:
- EU-U.S. Data Privacy Framework (DPF): an adequacy decision of the European Commission under Article 45 GDPR covering U.S. organizations certified under the DPF. Certification status can be verified at https://www.dataprivacyframework.gov/list. Where available, the DPF is used as the primary transfer mechanism.
- Standard Contractual Clauses (SCCs): contractual clauses approved by the European Commission under Article 46 GDPR, which we have in place as an additional or fallback safeguard.
The table below states which mechanism applies to each sub-processor.
Current sub-processors
| Sub-processor | Nature and purpose of processing | Location of processing | Transfer mechanism |
|---|---|---|---|
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | Cloud hosting infrastructure; storage and processing of Service data; sending of transactional and service emails | European Union (Germany West Central and France Central) | Not applicable (processing within the EU) |
| Google Ireland Ltd. / Google LLC (Google Analytics) | Web analytics: measurement of website usage and traffic | United States (and EU) | EU-U.S. DPF (Google LLC is DPF-certified) and SCCs (Google Ads Data Processing Terms) |
| PostHog, Inc. | Product analytics: analysis of how users interact with the Service | European Union (Frankfurt, AWS eu-central-1) | SCCs under PostHog's DPA (PostHog, Inc. is US-incorporated; data hosted in the EU) |
Changes to this list
We may add or replace sub-processors from time to time. We will update this page when we do and, where required by applicable law or contract, provide prior notice of the change. To ask questions about our sub-processors, contact us at privacy@trackmint.io.