Sub-processors
SoliCRM's sub-processors under article 28 GDPR. The list is updated before any change; customers are told by email 30 days ahead and may object.
| Sub-processor | Role | Data | Location | Safeguards |
|---|---|---|---|---|
| OVH SAS (OVHcloud) | Hosting of the servers and databases | All CRM data | France (Strasbourg) | EU, ISO 27001 certified |
| Cloudflare, Inc. | Domain name, traffic protection and encryption (TLS) | IP addresses, requests in transit | Global network, headquartered in the US | Standard contractual clauses, EU-US Data Privacy Framework |
| Resend, Inc. | Transactional emails (invitations, passwords, notifications) | Recipient address, message content | United States | Standard contractual clauses, EU-US Data Privacy Framework |
| Stripe Payments Europe, Ltd. | Billing of the SoliCRM subscription | The customer's billing details | Ireland (EU) | EU, PCI DSS level 1 |
Services the customer turns on
Used only when the customer connects them with their own account:
- Google (Gmail, Calendar) / Microsoft 365: reading the emails and meetings of the user who connects their mailbox.
- Stripe (the customer's account): online payment of their invoices.
- Yousign: advanced electronic signature of quotes.
- Aircall / Ringover: call log.
- E-invoicing platforms (Pennylane, Qonto, Iopole, Jefacture, Chorus Pro…): transmission of invoices.
- The AI provider configured for the assistant: the text of requests sent to the assistant.