Sub-processors
Our sub-processors
Last updated: 2026-05-30
To operate Musicdott we work with a small set of external vendors (sub-processors in GDPR terms). Below the complete list — any change is announced via email and on this page at least 30 days in advance.
| Vendor | Purpose | Region | Transfer basis | DPA |
|---|---|---|---|---|
| Stripe Inc. | Payment processing | US (+ EU DC) | SCC + supplementary measures | DPA |
| Railway Corp. | Hosting + PostgreSQL database | EU | n/a (EU) | DPA |
| Resend Inc. | Transactional email | US | SCC + supplementary measures | DPA |
| Sentry GmbH | Error monitoring (PII-redacted) | EU | n/a (EU) | DPA |
| UptimeRobot | Uptime monitoring (status pings) | US + EU | SCC + supplementary measures | DPA |
| Cloudinary Ltd. | Profile-photo CDN | US + EU | SCC + supplementary measures | DPA |
| Hostinger Intl. | DNS + email mailbox | EU | n/a (EU) | DPA |
| Google LLC | Google Calendar API (only on opt-in) | US | SCC + supplementary measures | DPA |
| Microsoft Corp. | Microsoft Graph (Outlook, only on opt-in) | US | SCC + supplementary measures | DPA |
Change notification
If we add a sub-processor, replace one, or relocate a transfer to another country, we email all account holders at least 30 days in advance and update this page. You may object via mail@musicdott.app — we will then either halt the planned change for your school or terminate the agreement per our terms.