Subprocessors
Analytics data from your website is collected, processed, and stored by EU-based providers. Below is every vendor we use, what we use it for, and which data it receives. Most of them never receive data from your website.
Last updated: October 27, 2026
EU-based infrastructure
These providers run the infrastructure that collects, processes, and stores the analytics data from your website.
| Provider |
|---|
 WorldstreamInfrastructure hosting Data: IP addresses* EU (Netherlands) |
 HetznerInfrastructure hosting Data: IP addresses* EU (Germany) |
 IntentionDomain name provider Data: - EU (Netherlands) |
 BunnyCDN, DNS Data: IP addresses (not logged) EU (Slovenia) |
 HyperpingUptime monitoring Data: System-level metrics only EU (France) |
* IP addresses are used only where needed to provide infrastructure services, such as DDoS protection and abuse-report evidence.
Opt-in features
These providers only receive data when you choose to use a feature that needs them. We never send them your data on our own.
| Provider |
|---|
 OpenAIAI assistant, only after you opt in Data: Your questions and the analytics data needed to answer them US |
 GoogleGoogle Analytics import and Google Data Studio connector Data: Only what you request: imports read data from your Google Analytics account, and the connector loads your analytics data into your Google Data Studio reports US |
Account, billing, and communication
These providers handle account details, such as your email address and invoices, and the messages and calls we have with you. Apart from the email reports you turn on, they don't receive analytics data.
| Provider |
|---|
 StripePayments and invoices Data: Name, email address, and billing details US |
 MoneybirdInvoices and bookkeeping Data: Name, email address, and billing details EU (Netherlands) |
 bunqBusiness bank account Data: Payer name and account number for bank transfers EU (Netherlands) |
 MailgunAccount emails and email reports. Mailgun is a US company, so we're looking for an EU-based alternative. Data: Email address and email content EU region |
 CirruxTeam email and calendar Data: Emails you send us EU (Netherlands) |
 MigaduEmail for service addresses Data: Emails sent to these addresses Switzerland |
 TallyForms Data: Answers you submit in our forms EU (Belgium) |
 Cal.comScheduling calls, such as demos Data: Name, email address, and meeting details when you book a call US |
 ZoomVideo calls Data: Name and email address of meeting participants US |
Internal tools
Our team uses these tools to build and run Simple Analytics. They don't receive customer data.
| Provider |
|---|
 GitHubSource code, CI, and container images Data: No customer data US |
 ConductorRunning coding agents in parallel Data: No customer data US |
 Claude CodeAI coding assistant Data: No customer data US |
 CursorCode editor Data: No customer data US |
| ChatGPT AI assistant for the team Data: No customer data US |
 ClaudeAI assistant for the team Data: No customer data US |
 CodexAI coding agent Data: No customer data US |
 CodeRabbitAI code reviews Data: No customer data US |
 1PasswordPassword manager Data: No customer data Canada |
 PagerDutyOn-call alerts for our infrastructure Data: No customer data EU region |
 ExchangeRatesAPICurrency exchange rates for pricing Data: No customer data EU (Austria) |
 DeepLTranslations Data: No customer data EU (Germany) |
 TellaScreen recordings Data: No customer data US |
 OdidoOffice internet Data: No customer data EU (Netherlands) |
 Lot61The coffee that keeps us going Data: No customer data, just coffee EU (Netherlands) |
Legacy infrastructure
We still run some services on these providers and plan to move them to the EU-based infrastructure above. DigitalOcean is a US company, and we use its Amsterdam data center.
| Provider |
|---|
 LeasewebHosting for the event queue and website Data: IP addresses* EU (Netherlands) |
 DigitalOceanWebsite thumbnails in the dashboard and internal alerts Data: Website domains shown in your dashboard, no visitor data EU (Netherlands) |
* IP addresses are used only where needed to provide infrastructure services, such as DDoS protection and abuse-report evidence.
Notes
- Analytics data from your website is collected, processed, and stored by EU-based providers. Our primary infrastructure is located in the Netherlands. Learn more about our security practices.
- Analytics data only goes to a provider outside the EU when you choose to use a feature that needs it, like the AI assistant or the Google Data Studio connector. See our GDPR compliance page for details.
- We never sell your data or share it with anyone for their own use. Each provider only receives what it needs to provide its service to us.
- For information about how we handle data processing agreements, see our DPA page.
For questions about our subprocessors:
Open contact form