Sub-Processor Register
All third-party providers that process personal data on behalf of Petanque Life and its tenant federations.
30-day advance notice is provided to all tenants before any sub-processor is added, in accordance with GDPR art.28 and our Data Processing Agreement.
Microsoft Azure (Microsoft Ireland Operations Ltd.)
Cloud infrastructure — compute, networking, storage (EU region: North Europe)
Azure Database for PostgreSQL (Flexible Server)
Sub-service of Microsoft Azure.
Primary database — relational data store
Azure Container Apps
Sub-service of Microsoft Azure.
API and background job hosting
Azure Static Web Apps
Sub-service of Microsoft Azure.
Frontend hosting — admin, app, CMS and marketing sites
Azure Communication Services
Sub-service of Microsoft Azure.
Transactional email and SMS delivery
Mailjet SAS (Sinch)
Added by C-5 39799381.m-4 after the register sweep found the integration in the Go stack (api/internal/newsletter/mailjet.go) without a published row. Contracting entity and DPA version are confirmed by the owner in the art.28.2 notice flow.
Newsletter and transactional email delivery — primary distributor (Azure Communication Services is the failover)
Azure Key Vault
Sub-service of Microsoft Azure.
Secrets and cryptographic key management
Stripe Payments Europe Ltd.
Payment processing — subscription billing, federation fee collection
PayPal (Europe) S.à r.l. et Cie, S.C.A.
Added by C-5 39799381.m-4 after the register sweep found the integration in the Go stack (api/internal/payments/paypal/paypal.go, provider registered in api/main.go) without a published row. The PSD2 conclusion drawn for Stripe does NOT extend to this module — that assessment belongs to PAY-3/PAY-5.
Payment processing — club-owned PayPal accounts (payee = the club merchant id; the platform never holds the funds)
Cloudflare, Inc.
DNS, CDN and edge security
DocuSign, Inc.
Electronic contract signing — DPA and SaaS agreement execution
GitHub, Inc. (Microsoft)
Source code only — no personal data of end users is processed.
Source code repository, CI/CD pipelines (GitHub Actions)
| Sub-Processor | Service | Jurisdiction | Active since | DPA |
|---|---|---|---|---|
| Microsoft Azure (Microsoft Ireland Operations Ltd.) | Cloud infrastructure — compute, networking, storage (EU region: North Europe) | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Azure Database for PostgreSQL (Flexible Server) Sub-service of Microsoft Azure. | Primary database — relational data store | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Azure Container Apps Sub-service of Microsoft Azure. | API and background job hosting | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Azure Static Web Apps Sub-service of Microsoft Azure. | Frontend hosting — admin, app, CMS and marketing sites | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Azure Communication Services Sub-service of Microsoft Azure. | Transactional email and SMS delivery | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Mailjet SAS (Sinch) Added by C-5 39799381.m-4 after the register sweep found the integration in the Go stack (api/internal/newsletter/mailjet.go) without a published row. Contracting entity and DPA version are confirmed by the owner in the art.28.2 notice flow. | Newsletter and transactional email delivery — primary distributor (Azure Communication Services is the failover) | EU — France (Mailjet SAS) | 2026-08-06 | DPA |
| Azure Key Vault Sub-service of Microsoft Azure. | Secrets and cryptographic key management | EU — Ireland (North Europe region) | 2024-01-01 | DPA |
| Stripe Payments Europe Ltd. | Payment processing — subscription billing, federation fee collection | EU — Ireland (Stripe Payments Europe Ltd.) | 2024-01-01 | DPA |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. Added by C-5 39799381.m-4 after the register sweep found the integration in the Go stack (api/internal/payments/paypal/paypal.go, provider registered in api/main.go) without a published row. The PSD2 conclusion drawn for Stripe does NOT extend to this module — that assessment belongs to PAY-3/PAY-5. | Payment processing — club-owned PayPal accounts (payee = the club merchant id; the platform never holds the funds) | EU — Luxembourg (PayPal (Europe) S.à r.l. et Cie, S.C.A.) | 2026-08-06 | DPA |
| Cloudflare, Inc. | DNS, CDN and edge security | US — Standard Contractual Clauses (SCCs) in effect | 2024-01-01 | DPA |
| DocuSign, Inc. | Electronic contract signing — DPA and SaaS agreement execution | US — Standard Contractual Clauses (SCCs) in effect | 2024-01-01 | DPA |
| GitHub, Inc. (Microsoft) Source code only — no personal data of end users is processed. | Source code repository, CI/CD pipelines (GitHub Actions) | US — Standard Contractual Clauses (SCCs) in effect | 2024-01-01 | DPA |
* Standard Contractual Clauses (EU SCCs 2021) in effect for transfers outside the EEA.