Skip to main content

Subprocessors

Last updated: October 3, 2026

Offsoo B.V. uses third parties to provide its services. Some of those parties (may) process personal data on Offsoo's behalf. This page distinguishes between:

  • Subprocessors for the Offsoo application (Offsoo is a processor acting for Customers);
  • Third parties for the website, marketing and business operations (Offsoo is the controller).

Offsoo concludes appropriate data processing agreements with subprocessors and uses valid transfer mechanisms for transfers outside the EEA (such as SCCs and/or the EU-US DPF where applicable).

Offsoo application (Offsoo as processor)

Hosting and infrastructure

  • DigitalOcean (Amsterdam, EU) - cloud hosting (servers and databases).
  • Cloudflare (EU) - file storage (R2, under EU jurisdiction), DNS and delivery of static files.

Support and customer communication

  • Intercom (US) - support and chat widget, and customer communication (may contain (limited) content).

Product analytics

  • PostHog (EU cloud) - which features of the application are used, by whom and when. No content is passed on (no client names, notes or amounts), only characteristics and times of use.

Logging, error handling and monitoring

  • Sentry (US) - error tracking (may contain technical metadata, the user who ran into the error and, in exceptional cases, payload).
  • Laravel Nightwatch (EU) - application monitoring.
  • Oh Dear (EU) - monitoring of availability and scheduled tasks (technical data).

Email

  • Postmark (US) - transactional email (notifications and system messages).

Push notifications

  • Expo (US) - push notifications to the mobile app (device tokens and notification content), delivered through Apple Push Notification service and Google Firebase Cloud Messaging.

Functional service providers

  • Google Maps Platform (international) - geocoding and distance based on postcode and house number (address data may be processed).
  • Netherlands Chamber of Commerce (KVK) API (NL) - looking up company data (a public source; depending on the legal form, personal data may occur).
  • Google Fonts, cdnjs (Cloudflare) and jsDelivr - deliver fonts and scripts to the browser (and see the IP address in doing so).

Integrations activated by the Customer (the Customer's third parties)

Offsoo offers optional integrations that the Customer can activate themselves:

  • Simplicate

Once activated, Offsoo exchanges data with the chosen third party on the Customer's instructions. In principle those third parties do not qualify as subprocessors of Offsoo, but as third parties of the Customer. The Customer is responsible for the (privacy) arrangements with them.

Website, marketing and business operations (Offsoo as controller)

Website hosting and content

  • Vercel (US, with a global CDN) - hosting and building of the marketing website (possibly IP addresses and logs).
  • The website has no CMS: its content lives in the website's own source code.

Marketing and analytics

  • PostHog (EU cloud) - product analytics for the website. Loaded from our own domain and places a first-party cookie. Also handles forwarding conversions to advertising platforms server-side.
  • Vercel Speed Insights (US) - performance statistics for the website; places no cookies.
  • Sentry (US) - error tracking for the website.
  • Google Ads, Meta, LinkedIn Ads, Microsoft Ads, TikTok - marketing and advertising; the browser pixels load on the production website only, and only while the campaign concerned is running.

Sign-up, payments and forms

  • Google reCAPTCHA Enterprise - protection against abuse (website forms).
  • Calendly - demo appointments (website).
  • Pusher Channels (EU) - shows progress while a workspace is being created.
  • Mollie (NL) - payments and direct debits for subscriptions.

Internal tooling and communication

  • Microsoft 365 / Outlook - email and business operations.
  • Slack - internal communication, including automated notifications (may contain support and operational data).

Changes and objection (for controllers)

For the Offsoo application, the objection arrangements set out in the DPA apply. Offsoo announces material changes to subprocessors in advance (by email or an in-app message, for example). Controllers may object, with reasons, within 14 days; if the objection cannot be resolved, the right of termination set out in the DPA applies.

Contact

For questions about this page, contact us at .