Subprocessors
Last updated: July 31, 2026
Offsoo B.V. uses third parties to provide its services. Some of those parties (may) process personal data on Offsoo's behalf. This page distinguishes between:
- Subprocessors for the Offsoo application (Offsoo is a processor acting for Customers);
- Third parties for the website, marketing and business operations (Offsoo is the controller).
Offsoo concludes appropriate data processing agreements with subprocessors and uses valid transfer mechanisms for transfers outside the EEA (such as SCCs and/or the EU-US DPF where applicable).
Offsoo application (Offsoo as processor)
Hosting and infrastructure
- DigitalOcean (Amsterdam, EU) - cloud hosting (droplets, databases), storage (Spaces/S3-compatible), networking.
Support and customer communication
- Intercom (US) - support and chat widget, and customer communication (may contain (limited) content).
Logging, error handling and monitoring
- Sentry (US) - error tracking (may contain technical metadata and, in exceptional cases, payload).
- SolarWinds Papertrail (EU/US) - log processing (technical logs).
- Laravel Nightwatch (EU) - application monitoring.
- Postmark (US) - transactional email (notifications and system messages).
Push notifications
- Pusher Beams - push notifications (device tokens and notification metadata; location depends on the supplier and settings).
Functional service providers
- Google Maps Platform (international) - geocoding and distance based on postcode and house number (address data may be processed).
- Netherlands Chamber of Commerce (KVK) API (NL) - looking up company data (a public source; depending on the legal form, personal data may occur).
Integrations activated by the Customer (the Customer's third parties)
Offsoo offers optional integrations that the Customer can activate themselves, such as:
- Exact Online
- Simplicate
Once activated, Offsoo exchanges data with the chosen third party on the Customer's instructions. In principle those third parties do not qualify as subprocessors of Offsoo, but as third parties of the Customer. The Customer is responsible for the (privacy) arrangements with them.
Website, marketing and business operations (Offsoo as controller)
Website hosting and content
- Vercel (US, with a global CDN) - hosting and building of the marketing website (possibly IP addresses and logs).
- The website has no CMS: its content lives in the website's own source code.
Marketing and analytics
- PostHog (EU cloud) - product analytics for the website. Loaded from our own domain and places a first-party cookie. Also handles forwarding conversions to advertising platforms server-side.
- Vercel Web Analytics & Speed Insights (US) - visit and performance statistics; places no cookies.
- Sentry (US) - error tracking for the website.
- Google Ads, Meta, LinkedIn Ads, Microsoft Ads, TikTok - marketing and advertising; the browser pixels load on the production website only, and only while the campaign concerned is running.
Anti-abuse and forms
- Google reCAPTCHA Enterprise - protection against abuse (website forms).
- Calendly - demo appointments (website).
Internal tooling and communication
- Microsoft 365 / Outlook - email and business operations.
- Slack - internal communication (may contain support and operational data).
Changes and objection (for controllers)
For the Offsoo application, the objection arrangements set out in the DPA apply. Offsoo announces material changes to subprocessors in advance (by email or an in-app message, for example). Controllers may object, with reasons, within 14 days; if the objection cannot be resolved, the right of termination set out in the DPA applies.