Legal information
Subprocessors
Updated on 24 October 2026
Last updated: 19 October 2026
This page lists the providers to which Altius Group SNC entrusts part of the data processing needed to run AltiusForms. It supplements the data processing agreement and the privacy policy. We announce any new subprocessor on this page before entrusting it with instance data.
1. Providers that process data
| Provider | Role | Data concerned | Location | Safeguards |
|---|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen (Germany) | Cluster server that runs the hosted instances and their nightly backups | All instance content: user accounts, forms, responses, files (except those stored at Wasabi), logs | Helsinki, Finland | European Union, whose level of protection Switzerland recognises; provider's data processing agreement (Art. 28 GDPR) |
| Hetzner Online GmbH, Gunzenhausen (Germany) | Outgoing mail server mail.altiusmail.ch |
Recipient address and content of service emails (address confirmation, password reset, invoices, notices) | Falkenstein, Germany | European Union; provider's data processing agreement |
| Hostinger International Ltd. | Server of the altiusforms.com portal (website, customer area) | Customer accounts, subscriptions, billing history, support requests, server logs | France | European Union; provider's data processing agreement |
| Wasabi Technologies, Inc., Boston (United States) | Object storage for the files of the instances that use it (photos, documents, recordings attached to responses) | Files attached to responses and forms; each instance has its own space and its own access key | Region eu-central-2, Frankfurt, Germany | Data stored in the European Union; US company: provider's data processing agreement with standard contractual clauses |
| Stripe Payments Europe, Ltd., Dublin (Ireland), and Stripe, Inc. (United States) | Subscription payments, invoices, metering of billed storage | Name, email, billing address, payment method (entered at Stripe, never with us), amounts | Ireland and United States | Stripe's data processing agreement; transfers to the United States covered by standard contractual clauses |
| Tucows Domains Inc. (OpenSRS), Toronto (Canada) | Domain name registration, only if you order one in the customer area | Contact details of the domain holder, passed to the registry as registration requires | Canada | Country whose level of protection Switzerland and the EU recognise |
| Google LLC (Firebase Cloud Messaging), Mountain View (United States), and Google Ireland Ltd. | Push notifications of the mobile app (relayed by the portal to Android and iOS) | Device notification token, title and short text of the notification, instance identifier; no form responses | United States and European Union | Google Cloud data processing terms; transfers to the United States covered by standard contractual clauses |
2. Providers without access to the data
- Cloudflare, Inc. runs the name servers (DNS) of the altiusforms.com domain. The records are not proxied by Cloudflare: website and instance traffic goes straight to our servers and Cloudflare does not see it.
- Let's Encrypt issues the HTTPS certificates. No customer data is passed to it.
- The fonts of the website and the instances are served by our own servers: no call to Google Fonts.
- There is no audience measurement, no advertising tracker and no error-tracking service (such as Sentry) on the website, in the instances or in the mobile app.
- No external artificial intelligence service is called: smart search and text recognition in images (OCR) run inside the instance itself. The search model is downloaded once from Hugging Face, without sending any data.
3. Third-party services tied to certain features
These services are not our subprocessors in the strict sense: they are only called when a specific feature is used, often directly by the person's browser or app. Customers may wish to mention them when informing the people who fill in their forms.
| Service | When | What is transmitted |
|---|---|---|
| Esri (ArcGIS Online, United States) | Default base map for map questions, on the web, in the mobile app and in PDFs | The device's IP address (or the server's for PDFs) and the map tiles requested |
| swisstopo (Swiss Federal Office of Topography) | Swiss address search and Swiss base map | The address text typed (sent by the instance); for the map, the device's IP address |
| OpenStreetMap Foundation (United Kingdom) and OpenTopoMap (Germany) | Map of a response and optional topographic base map | The device's IP address and the tiles requested |
| Cloudflare Turnstile | Only if the customer turns on bot protection for its public forms | The IP address and technical signals from the browser |
| Google Translate | Only if the instance administrator starts the automatic translation of a form's texts | The form's texts (questions, labels), not the responses |
| Google Fonts | Only if the administrator picks a font other than the default for the theme | The device's IP address |
| Google ML Kit (Android) | Scanning a QR code in the Android app; the analysis runs on the device | According to Google, usage statistics of the library |
| Single sign-on providers (Google, Microsoft, another OpenID Connect provider) | Only if the customer configures single sign-on for its instance | The identity information exchanged at sign-in |
4. Self-hosted instances
An instance installed on your own servers uses none of the providers in section 1, except those you choose yourself. It only contacts the portal to check its licence key (key, instance address and version).
5. Questions and objections
For any question, or to object to a new subprocessor under your contract, write to support@altius-group.ch.