The following providers process personal data on our behalf under Data Processing Agreements (DPAs). We update this list whenever it changes.
Version 1.2 corrects omissions: providers already in use but not listed were added (Cloudflare network, Expo, Google FCM, Apple APNs, Hostinger), and the description of AI features was corrected — only document import via Mistral AI is in use; the AI assistant is not enabled. "Planned" means the provider receives no data; activation is announced at least 30 days in advance.
| Vendor | Purpose | Location | Transfer mechanism | DPA | Status |
|---|---|---|---|---|---|
| Railway | App + database hosting (PostgreSQL, Redis) | EU (europe-west4, Amsterdam) | — | Signed | Active |
| Cloudflare (network) | DNS, reverse proxy and CDN in front of every flatie.hr address (IP address, URL, headers) | Global edge network | SCC 2021/914 | Signed (Cloudflare DPA) | Active |
| Cloudflare R2 | File storage (documents, images) | EU | — | Signed (Cloudflare DPA) | Active |
| Resend | Transactional email; newsletter and contact form on flatie.hr | EU (Ireland) | — | Signed | Active |
| BetterStack | Logs, errors, crash reporting, real-user performance monitoring (RUM) | EU | — | Signed | Active |
| PostHog EU | Product analytics (web app + mobile app; pseudonymous usage events) | EU (Frankfurt) | — | Signed (standard DPA terms) | Active |
| Google Ireland Ltd | Google Analytics 4 (marketing site flatie.hr only; consent-gated) | EU / United States | SCC 2021/914 + EU-US DPF (Google LLC) | Signed (Google Ads Data Processing Terms) | Active |
| Mistral AI | AI document import: text recognition and data extraction from documents a building manager or representative uploads | France (EU) | — | Pending signature | Active |
| Expo (650 Industries) | Relay of push notifications to the mobile app (device token, notification title and text); app updates | United States | SCC 2021/914 | Pending | Active |
| Google (Firebase Cloud Messaging) | Delivery of push notifications to Android devices and Chrome | Global infrastructure | SCC 2021/914 | Pending confirmation | Active |
| Apple (Push Notification service) | Delivery of push notifications to Apple devices | Global infrastructure | SCC 2021/914 | Pending confirmation | Active |
| Hostinger | Flatie company mailboxes (info@, support@): correspondence addressed to Flatie | EU | — | Pending confirmation | Active |
| Mistral AI | AI assistant inference (not enabled) | France (EU) | — | Before activation | Planned |
| Cohere | Search for the AI assistant: embeddings and result ranking (not enabled) | Canada / United States | Adequacy decision (Canada) or SCC 2021/914 | Before activation | Planned |
| Anthropic PBC | Alternative model for the AI assistant (not enabled) | United States | SCC 2021/914 | Before activation | Planned |
Change notifications
Planned changes are announced at least 30 days before rollout. To subscribe to notifications, email [email protected].