Sub-processors
Lattney is a product of HiWork LLC. To run the service we use the third parties listed below. This page is the list Article 28(2) of the GDPR and the UK GDPR entitles you to, and it is kept current.
Last updated: September 10, 2026.
Who receives data, and why
| Vendor | Purpose | Processed in | Capacity |
|---|---|---|---|
| Cloudflare, Inc. | Edge proxy in front of the application. Terminates TLS, so every request and response passes through it | USA | Sub-processor of customer content |
| Hetzner Online GmbH | Application servers and the PostgreSQL database | Hillsboro, Oregon, USA | Sub-processor of customer content |
| Hatchbox.io (GoRails, LLC) | Deployment control plane for the servers Hetzner hosts. Its agent holds privileged access to those machines, and its system stores our environment variables | USA. It holds no copy of customer data | Infrastructure access, receives no customer content |
| Amazon Web Services | Object storage for uploaded files, inbound and outbound mail, mail notification, and the destination of our database backups | USA (us-east-1) |
Sub-processor of customer content |
| AppSignal B.V. | Error monitoring and the application log stream | Netherlands | Sub-processor of customer content |
| PostHog | Product analytics, including pageviews from the public share pages your contacts open. It also sends some of our service email, such as the welcome message and the reminder that your trial is ending, and it will send our marketing email once that goes live | USA | Processor of our own account data |
| Stripe, LLC | Payment processing and subscription billing. Your purchase is sold through Link, a Stripe company, which is the merchant of record | USA | Processor of our own account data, and independent controller |
| Google LLC | Google sign-in, our support inbox, and advertising measurement on our marketing website | Not committed by the agreement, and varies by service | Processor of our own account data, and independent controller |
| Framer B.V. | Builds and hosts our marketing website at lattney.com, so it serves those pages and receives the requests for them. It holds nothing you put into Lattney | Netherlands | Marketing website host, receives no customer content |
What the capacities mean
| Capacity | Meaning |
|---|---|
| Sub-processor of customer content | Processes what you put into the CRM, on your behalf, under Article 28 |
| Infrastructure access, receives no customer content | Has privileged access to the machines your data runs on, but receives no copy of it. We list it because the access is real and you should know who holds it |
| Marketing website host, receives no customer content | Serves our marketing website, so it sees visits to lattney.com. Nothing from your Lattney account reaches it |
| Processor of our own account data | Processes data on our instruction, where Lattney is the controller |
| Independent controller | Determines its own purposes for the data it receives, so it is not processing on anyone's instruction |
A vendor carries two capacities where the relationship is genuinely split. Stripe is our payment processor, and your purchase is sold through Link, a Stripe company, which is the merchant of record and so the seller to you for that transaction, deciding its own purposes for the data that involves. Google processes our support mail and our marketing-site analytics on our instruction, and it is also the provider of the Google account you use if you sign in with Google, which it holds for its own purposes.
Your authorization, and how we change this list
You give HiWork LLC general written authorization to engage the sub-processors on this list, and to engage new ones, subject to the notice and objection rights below.
| Commitment | Detail |
|---|---|
| Notice | We give you at least 30 days' notice before a new sub-processor begins processing your data. Notice goes to the email address on record for your account, and this page and its change log are updated at the same time |
| Objection | You may object within those 30 days, on reasonable grounds relating to data protection |
| Remedy | If you object and we cannot resolve it, you may terminate your subscription without penalty, and we refund the unused portion of any fees you have already paid |
We will not remove a vendor from our infrastructure for one customer, so the remedy for an objection is an exit rather than a change to the list. We would rather say that plainly than imply otherwise.
Change log
| Date | Change |
|---|---|
| August 17, 2026 | This page published |
| August 19, 2026 | Hatchbox.io reclassified from sub-processor of customer content to infrastructure access. It receives no copy of your data: no backups, no log stream and no database content reach it. No vendor was added or removed |
| August 19, 2026 | Framer added. It has hosted our marketing website all along, and this is a correction to the list rather than a new vendor, so no notice period applies. Google's entry now says advertising measurement, which is what the tag on that site actually does |
| August 19, 2026 | Hotjar removed. It recorded visitor sessions on our marketing website. It was never named on this list while it ran, which was our error, and we would rather log that than quietly leave it out. It receives nothing further. Nothing from inside your Lattney account ever reached it |
| August 20, 2026 | Stripe's entry corrected. The merchant of record is Link, a Stripe company, and not Stripe, LLC: Stripe's own documentation says the customer "sees Link as the merchant of record" and that the card statement shows LINK.COM, which is what our terms have always said. This page said Stripe, so the two disagreed. No vendor was added or removed, and no notice period applies |
| September 10, 2026 | PostHog's purpose now says it also sends service email. It sends the welcome message and the trial-ending reminder, which it addresses to the email address on your account. PostHog was already on this list and already received that address, so no vendor was added and no notice period applies |