Last updated: 13 November 2026
1. About this list
Roltek A.Ş. (Roltek Teknoloji), the provider of Hermetry, uses the service providers below. Platform sub-processors process Customer Content on our behalf under the data processing addendum (DPA). Website processors process data of visitors to hermetry.com and members of the community forum, for which Roltek is the controller as described in the privacy policy.
Every provider is bound by a written contract with data protection duties no less protective than our own. Where data leaves the country or region in which it was collected, the safeguards in section 9 of the DPA and section 7 of the privacy policy apply.
Hetzner, Portvmind and Amazon Web Services only provide servers and storage. They do not receive the data for their own purposes and handle it only as far as needed to run that infrastructure, under their contracts with Roltek.
2. Platform sub-processors
| Provider | Service | Where the data is | Data | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | Servers for the EU region | Helsinki, Finland (EU) | Customer Content of organisations in the EU region | None needed: the data stays in the EU |
| Hetzner Online GmbH, Gunzenhausen, Germany | Servers for the US region | Ashburn, Virginia (US) | Customer Content of organisations in the US region | The data stays in the US; Hetzner operates the servers under its contract with Roltek (DPA section 9) |
| Portvmind, Türkiye | Servers for the Türkiye region and for the fleet hub, which runs Hermetry ID sign-in | Türkiye | Customer Content of organisations in the Türkiye region; account and sign-in data of people who use Hermetry ID | Türkiye-region data stays in Türkiye. Sign-in data of people from the EU region: EU standard contractual clauses (DPA section 9.2) |
3. Website processors (hermetry.com and the forum)
| Provider | Service | Where the data is | Data | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | Servers for the website and the community forum | Helsinki, Finland (EU) | Technical data of visitors, forum accounts and posts, contact form messages | None needed: the data stays in the EU |
| Amazon Web Services EMEA SARL, Luxembourg | Storage of files uploaded to the website and the forum | Frankfurt, Germany (EU) | Uploaded images and files | The data stays in the EU; any access from outside the EU is covered by AWS's data processing addendum with EU standard contractual clauses |
| Anthropic, PBC, San Francisco, United States | Forum translation, the forum help bot and the website's chat assistant (Claude) | United States | Forum posts, questions to the help bot and chat messages; e-mail addresses, phone numbers and card and bank numbers are removed before a chat message is sent | See section 7 of the privacy policy |
4. Not in use yet
- E-mail, SMS and payment services. Hermetry does not use an outside provider for these yet. Each one will be added under the same procedure before it processes personal data.
- Website analytics. Google Analytics 4 (Google Ireland Limited) is switched off. If we switch it on, Google will be added here, and it runs only for visitors who allow analytics cookies (see the cookie policy).
- Planned changes. We plan to keep each region's files in object storage from Amazon Web Services in that region's own location, and we may move a region's servers to another provider, for example to Amazon Web Services in the same country. Any such change follows section 5.
5. Changes to this list
We update this page before a new provider starts processing personal data. For platform sub-processors we also tell each customer's administrators by e-mail or in the Service at least 30 days in advance, and the customer may object on reasonable data protection grounds, as set out in section 6 of the DPA. Replacing a provider, including within the same country, follows the same procedure. The date at the top shows when the list last changed.
Questions about this list: info@hermetry.com.