Legal
Subprocessors
Last updated: 15 August 2026
Tensel relies on the subprocessors below to run the service. None of them quietly receives your logs, your secrets or your application data.
| Subprocessor | What they do | Where | Required? |
|---|---|---|---|
| Scaleway SAS (France) | Hosting: compute, storage, database, image registry, secrets, monitoring, transactional email | Paris region (fr-par), European Union | Required — this is the service |
| GitHub, Inc. (United States) | Source code integration: repositories, webhooks, commit statuses; optional OAuth sign-in | Operated from the United States | Optional, and only if you connect a repository or choose to sign in with GitHub. Deploying by uploading a folder never touches it. |
| BunnyWay d.o.o. (Slovenia) | Content delivery network for static sites: caching and TLS termination at the edge | European points of presence only — the EU, plus Switzerland, the United Kingdom and Norway, all covered by an adequacy decision. The origin and everything at rest stay in Paris. | Required for static sites. A European company, not subject to the USCLOUD Act. No dynamic application data, no secrets and no logs pass through it. |
| Mollie B.V. (Netherlands) | Payment processing (arriving with the paid plans) | EU for the contracting entity; payment details are tokenised. Mollie states that some processing may happen outside the European Economic Area under an appropriate transfer mechanism. | Required for paid plans, and never sees application data. Switching it on is blocked until we have checked the contract, the data processing agreement, where the service runs, the transfers, and the full chain of onward subprocessors. |
Any change to this register is announced on this page before it takes effect.