Last updated September 9, 2026
| Sub-processor | What it does for us | Where |
|---|---|---|
| Google Workspace | Hosts info@tourman.app and each organization's dedicated booking mailbox; Gmail API access to parse forwarded booking emails | EU |
| Stripe | Billing and payment processing | US, with EU safeguards (Data Privacy Framework + Standard Contractual Clauses) |
| Resend | Sends transactional emails (password resets, notifications) | US, with EU safeguards (Standard Contractual Clauses + Data Privacy Framework) |
| Hetzner | Hosts the application and database | Germany (EU) |
Meta / WhatsApp isn't a TourMan sub-processor. Each organization creates and controls its own WhatsApp Business Account directly with Meta — including paying Meta directly — and simply authorizes TourMan to send messages through it. Meta is each organization's own vendor, not one TourMan selected. See the DPA, §4.4, for the full reasoning.
Anthropic (for the optional AI Concierge feature) isn't a TourMan sub-processor either. An organization that enables AI Concierge supplies its own Anthropic API key and account, billed directly to that organization — Anthropic is that organization's own vendor for this feature, not one TourMan selected. See the DPA, §4, for the full reasoning.