Legal
Sub-processors
Last updated 4 October 2026
1. About this list
BattGrade uses the service providers below to run its service. Where they process personal data for us, they are our sub-processors. The last column shows whether a provider receives the customer data that inspectors' companies enter, which we process for them under the Data Processing Terms.
We announce a new or replaced sub-processor on this page, and by email to account owners, at least 30 days before it starts processing customer data.
2. The providers
Hetzner Online GmbH
- What it does for us
- The servers that run our website, our API and our database.
- Location
- Germany
- Data it receives
- The data in our database and logs: accounts, company profiles, tests, certificates, customer data, technical reports and server logs. Receives customer data: yes.
Cloudflare, Inc.
- What it does for us
- DNS, delivery and protection of battgrade.com: all traffic to our website and API passes through Cloudflare. Cloudflare R2 stores company logos and the copies printed on certificates.
- Location
- United States company with a global network
- Data it receives
- All data sent to or from our website and API while in transit, including IP addresses; logo images. Receives customer data: yes, in transit.
Sendinblue SAS (Brevo)
- What it does for us
- Sends our emails: certificates to customers with their PDF, account emails, form confirmations and internal notifications. Keeps the newsletter list.
- Location
- France
- Data it receives
- Recipients' names and email addresses, email content and attachments, delivery events, newsletter subscribers. Receives customer data: yes.
Google LLC (Firebase Authentication)
- What it does for us
- Sign-in for inspector accounts.
- Location
- United States
- Data it receives
- Inspectors' email address, password (as a hash), name, sign-in times, IP address and device information. Receives customer data: no.
Google (Google Workspace)
- What it does for us
- Our mailbox, [email protected]: messages from the website forms, support emails and internal notifications.
- Location
- United States company; data centres in several countries
- Data it receives
- The content of messages sent to us, with names and email addresses; internal notifications about new accounts and technical reports (inspector's name and email, vehicle and error details). Receives customer data: no, unless someone sends it to us by email.
650 Industries, Inc. (Expo)
- What it does for us
- Delivers updates to the BattGrade mobile app.
- Location
- United States
- Data it receives
- IP address, platform, app runtime version, update channel and a random installation identifier. Receives customer data: no.
| Provider | What it does for us | Location | Data it receives |
|---|---|---|---|
| Hetzner Online GmbH | The servers that run our website, our API and our database. | Germany | The data in our database and logs: accounts, company profiles, tests, certificates, customer data, technical reports and server logs. Receives customer data: yes. |
| Cloudflare, Inc. | DNS, delivery and protection of battgrade.com: all traffic to our website and API passes through Cloudflare. Cloudflare R2 stores company logos and the copies printed on certificates. | United States company with a global network | All data sent to or from our website and API while in transit, including IP addresses; logo images. Receives customer data: yes, in transit. |
| Sendinblue SAS (Brevo) | Sends our emails: certificates to customers with their PDF, account emails, form confirmations and internal notifications. Keeps the newsletter list. | France | Recipients' names and email addresses, email content and attachments, delivery events, newsletter subscribers. Receives customer data: yes. |
| Google LLC (Firebase Authentication) | Sign-in for inspector accounts. | United States | Inspectors' email address, password (as a hash), name, sign-in times, IP address and device information. Receives customer data: no. |
| Google (Google Workspace) | Our mailbox, [email protected]: messages from the website forms, support emails and internal notifications. | United States company; data centres in several countries | The content of messages sent to us, with names and email addresses; internal notifications about new accounts and technical reports (inspector's name and email, vehicle and error details). Receives customer data: no, unless someone sends it to us by email. |
| 650 Industries, Inc. (Expo) | Delivers updates to the BattGrade mobile app. | United States | IP address, platform, app runtime version, update channel and a random installation identifier. Receives customer data: no. |
3. Website statistics: hosted by us
We count website visits with Plausible Analytics (Community Edition), which we run on our own server at analytics.buum.md, behind Cloudflare. Plausible Insights OÜ, the company that develops Plausible, receives no data from us. The Cookie Policy describes what is counted.
4. Not sub-processors
Apple (App Store, TestFlight) and Google (Google Play) distribute the BattGrade app under their own terms and privacy policies, as independent controllers. They do not process data for us.
5. Changes to this list
4 October 2026: first publication of this list.