Transparent publication in accordance with Art. 28.2 and 28.4 GDPR
Version: 2025.2
Last updated: 22 november 2025
Publication URL: www.id2bytes.com/subprocessors
DPA Annex: Bijlage B
| Subprocessor | Category | Location | International Transfer |
|---|---|---|---|
| Microsoft Azure | Cloud Infrastructure | EU (primary) | Possibly US (DPF + SCCs) |
| OpenAI | AI Model Provider | US | DPF + SCCs + Zero retention |
| Anthropic | AI Model Provider | US | SCCs + Zero retention |
| Azure OpenAI | AI Model Provider | EU (primary) | DPF + SCCs |
| Mollie | Payment Processing | NL/EU | None (EU only) |
| Microsoft 365 | Communication | EU (primary) | DPF + SCCs |
| Mailchimp | Marketing | US/EU | DPF + SCCs + EU option |
| Application Insights | Monitoring | EU | None (EU only) |
| Google Analytics | Monitoring | EU/US | DPF + SCCs |
| GitHub | Development | US/EU | DPF + SCCs |
| Cloudflare | Security | Worldwide | DPF + SCCs |
| Azure Backup | Backup & DR | EU | None (EU only) |
| Zendesk Optional | Support & CRM | EU/US | DPF + SCCs |
| HubSpot Optional | CRM | US/EU | DPF + SCCs |
If you object to a (new) subprocessor, you can contact us within 30 days of notification:
Email: privacy@id2bytes.com
Phone: +31 (0)6 52 21 51 59
Deadline: Within 30 days of notification of change
In case of a valid objection, parties will consult on alternatives. Possible alternatives include EU-only infrastructure, other subprocessors, or on-premise solutions.
| Version | Date | Changes |
|---|---|---|
| 2025.2 | 22 november 2025 |
Removed: Amazon Web Services (AWS), Google Cloud Platform (GCP), Stripe Added: Mailchimp (email marketing) Reason: ID2Bytes uses exclusively Microsoft Azure for cloud infrastructure and Mollie for payments |
| 2025.1 | 22 november 2025 | Initial version with 13 subprocessors (cloud, AI, payment, communication, monitoring) |
Email: privacy@id2bytes.com
Phone: +31 (0)6 52 21 51 59
We will answer your questions within 10 business days.