To provide our services, we engage a number of trusted third-party suppliers ("sub-processors") who process personal data on our behalf.
All sub-processors are bound by contractual obligations to maintain appropriate data protection and security standards in accordance with the GDPR.
Customers will be notified in advance of any material changes to this list.
Provider / Brand | Legal Entity | Role | Primary Region |
Amazon Web Services (AWS) | Amazon Web Services EMEA SARL (Luxembourg) | Cloud infrastructure and hosting | EU (Ireland, Germany) |
Microsoft Azure | Microsoft B.V. / Microsoft Datacenter Netherlands B.V. | Cloud hosting and platform services | EU (Netherlands) |
Google Cloud | Google Cloud EMEA Limited (Ireland) | Cloud infrastructure and storage | EU |
Vercel | Vercel Inc. (USA) | Front-end hosting and deployment | USA (SCCs) |
Namespace | Namespace Labs Inc. (USA) | CI/CD build infrastructure and ephemeral environments | USA (SCCs) |
Terrateam | Terrateam B.V. (NL) | Terraform / infrastructure-as-code automation | USA (SCCs) |
Provider / Brand | Legal Entity | Role | Primary Region |
Google Workspace / Tag Manager / Analytics | Google Ireland Limited (+ Google LLC as sub-processor) | Productivity, analytics and marketing tools | EU / USA (SCCs) |
Atlassian (Jira Cloud / Confluence / Service Desk) | Atlassian B.V. (Netherlands) | Issue tracking and documentation | EU |
Figma | Figma Netherlands B.V. | Design collaboration platform | EU / USA (SCCs) |
Miro (RealtimeBoard) | RealtimeBoard B.V. (Netherlands) / RealtimeBoard Inc. | Online whiteboarding | EU / USA (SCCs) |
Intercom | Intercom R&D Unlimited Company (Ireland) | Customer communication and support chat | EU |
Slack / Messaging tools | Salesforce Ireland Ltd. | Team communication | EU / USA (SCCs) |
MessageBird | MessageBird B.V. (Netherlands) | SMS and communication services | EU |
1Password | AgileBits Inc. d/b/a 1Password (Canada) | Credential and secrets management | CA / USA (SCCs) |
incident.io | Pineapple Technology Ltd d/b/a incident.io (United Kingdom) | Incident management and response coordination | UK (SCCs) |
n8n | n8n GmbH (Germany) | Workflow automation | EU (Germany) |
Provider / Brand | Legal Entity | Role | Primary Region |
GitHub | GitHub B.V. (Netherlands) | Source-code hosting and CI/CD | EU / USA (SCCs) |
JetBrains | JetBrains N.V. (Netherlands) | Developer IDEs and code analysis | EU |
JFrog | JFrog Ltd. (Israel) | Package management and artifact storage | IL (SCCs) |
BrowserStack | BrowserStack Limited (Ireland) | Cross-browser testing | EU |
Sentry | Functional Software, Inc. (dba Sentry) | Application monitoring and error tracking | USA (SCCs) |
Tailscale | Tailscale Inc. (Canada) | Secure networking and VPN | CA / USA (SCCs) |
SonarSource | SonarSource SA (Switzerland) | Code-quality analysis | CH (EU Adequacy) |
Simplicate | Simplicate Software B.V. (Netherlands) | Time-tracking / project management | EU |
Honeycomb | Hound Technology, Inc. d/b/a Honeycomb (USA) | Observability, tracing and application monitoring | EU (eu1 region) / USA (SCCs) |
650 Industries (Expo) | 650 Industries, Inc. (USA) | Mobile app build and deployment platform (EAS) | USA (SCCs) |
The Guild — Hive | Software Products Guilda Ltd | GraphQL schema registry and API monitoring | USA (SCCs) |
Provider / Brand | Legal Entity | Role | Primary Region |
Anthropic (Claude) | Anthropic PBC (USA) | AI language model services | USA (SCCs) |
OpenAI | OpenAI Ireland Limited (Ireland) — EEA contracting entity | AI language model services | EU / USA (SCCs) |
Cursor | Anysphere, Inc. (USA) | AI-assisted code editor | USA (SCCs) |
Granola | Granola, Inc. (USA) | AI meeting notes and transcription | USA / UK (SCCs) |
Provider / Brand | Legal Entity | Role | Primary Region |
Adobe | Adobe Systems Benelux B.V. (Netherlands) | Creative / document software services | EU |
Freepik | Freepik Company S.L. (Spain) | Stock media and graphics assets | EU |
Sketch | Sketch B.V. (Netherlands) | Interface design software | EU |
Litmus | Litmus Software, Inc. (USA) | Email testing and rendering | USA (SCCs) |
Provider / Brand | Legal Entity | Role | Primary Region |
ContentKing | ContentKing B.V. (Netherlands) | SEO / content auditing | EU |
Majestic | Majestic-12 Ltd (UK) | SEO link analysis | UK (SCCs) |
GTmetrix | WP Media SAS | Site performance testing | CA (SCCs) |
DeepL | DeepL SE (Germany) | Translation and AI language services | EU |
Transifex | Transifex OpCo LLC (USA) | Localisation platform | USA (SCCs) |
Wappalyzer | Wappalyzer Pty Ltd (Australia) | Technology analytics | AU (SCCs) |
SolarWinds | SolarWinds Software Europe DAC (Ireland) | Monitoring and network tools | EU |
Visionect | Visionect d.o.o. (Slovenia) | Digital signage and hardware interfaces | EU |
Crowdin | Crowdin OÜ (Estonia) | Localisation platform | EU |
SE Ranking | SER Acquisition Inc. (USA) | SEO analytics and rank tracking | USA (SCCs) |
MapTiler | MapTiler AG (Switzerland) | Mapping and geolocation services | CH / (European Adequacy) |
CookieFirst | Digital Data Solutions B.V. (Netherlands) | Cookie consent management platform | EU |
Provider / Brand | Legal Entity | Role | Primary Region |
Paddle | Paddle Market Ltd (UK) | Software licensing and payment processing | UK (SCCs) |
Ruboss Technology | Ruboss Technology Corporation (Canada) | Billing / integration software | CA (SCCs) |
Remote | Remote Europe Holding B.V. (Netherlands) | Payroll and employment services | EU |
Rabobank | Coöperatieve Rabobank U.A. (Netherlands) | Banking and payment services | EU |
FastSpring | Bright Market, LLC d/b/a FastSpring (USA) | Payment processing and software licensing (merchant of record) | USA (SCCs) |
Nmbrs | Nmbrs B.V. (Netherlands), part of the Visma Group | Payroll and HR administration software | EU |
Docusign | Docusign International (EMEA) Limited | E-signing solution | EU |
The following independent professionals or small companies provide specialist support under contract with Lab Digital. Each contractor has signed confidentiality and data-processing agreements.
Name | Legal Entity (if applicable) | Role / Function |
David Weterings | David Weterings | Software engineering |
Dunya Timmers | Dunya Timmers | Project Management |
Lars Evers | PuraSec B.V. | Security consultancy |
Lars Wisselink | Lars Wisselink | Software development |
Marcel Veltrop | Veltrop.io | Project Management |
Mike de Bock | Bockbone B.V. | Backend engineering |
Rob Moorman | Vicktor B.V. | Software Engineer |
Robert Spijker | Spijker Digital B.V. | Front-end development |
Storm Heg | Vicktor B.V. | Software Engineer |
Thijs Smudde | Plant Powered IT Company | Software development |
Tim Leguijt | Leguijt ICT | ICT infrastructure |
Tim Lolkema | deTesters B.V. | Quality assurance / testing |
Vincent van den Brink | 8balls | UI development |
SCCs = Standard Contractual Clauses used for international data transfers outside the EEA.
All providers listed are required to implement appropriate technical and organisational measures in line with GDPR Article 32.
Natural persons are not listed with personal addresses; records are maintained internally for audit purposes.
Updates to this list will be reflected on this page.