Sub-processors

The providers we use to process personal data when we build or host apps for clients.

Last updated: 9 October 2026

When we host or build an app for a client, we are the client's processor. The providers below process personal data on our behalf, which makes them our sub-processors. Each one is bound by a data processing agreement with terms that protect the data at least as well asour agreement with the client. Each client's processing schedule shows which of these apply to their app.

Current sub-processors

Hexa Studios sub-processors
Provider	Purpose	Data location	Transfer mechanism	DPA
Hetzner Online GmbH	Servers, snapshots and object storage	Germany, Finland	UK adequacy regulations EU adequacy decision Data stays in the EEA.	Hetzner DPA
DigitalOcean, LLC	Cloud hosting	EU regions, London, UK	EU Standard Contractual Clauses UK Addendum to the EU SCCs DigitalOcean is a US company. Its DPA includes the EU SCCs and the UK Addendum.	DigitalOcean DPA
Sinch Email (Mailgun)	Sending transactional email	Germany, Belgium	EU Standard Contractual Clauses UK Addendum to the EU SCCs EU-US Data Privacy Framework UK Extension to the EU-US Data Privacy Framework Mailgun's EU region. Sinch is a Swedish group; its DPA allows transfers within the group.	Sinch DPA
Plus Five Five, Inc. (Resend)	Sending transactional email	Ireland, United States	EU Standard Contractual Clauses UK Addendum to the EU SCCs EU-US Data Privacy Framework UK Extension to the EU-US Data Privacy Framework Email is sent from Resend's Ireland region. Account data is stored in the United States.	Plus DPA
Cloudflare, Inc.	DNS (records are not proxied, so app traffic does not pass through Cloudflare)	Global network	EU-US Data Privacy Framework UK Extension to the EU-US Data Privacy Framework EU Standard Contractual Clauses UK Addendum to the EU SCCs Cloudflare is a US company.	Cloudflare DPA

Changes to this list

We give clients 30 days' notice before we add or replace a sub-processor. Clients can object to a change during that period, as set out in our data processing agreement.

To be told about changes, email privacy@hexastudios.co and ask to join the notification list.