Sub-processors & Third-Party Services

Service Provider

Google LLC

Role: processor acting on our instructions, under the Google Cloud DPA

Data Location

🇪🇺 EU — Firestore: Europe multi-region (eur3, Belgium and Netherlands) · File storage: EU multi-region · Cloud Functions: europe-west3 (Frankfurt) · Firebase Authentication: region not pinned

Purpose

Database, authentication, file storage, hosting and Cloud Functions — and Google reCAPTCHA v3, which Firebase App Check runs to block automated abuse

Data Processed

User profiles, rental and tenant records, the documents you generate — which can contain sensitive details you enter, such as a social-security number or disability information — app data, and the risk signals reCAPTCHA collects

Service Provider

Cloudflare, Inc.

Role: processor acting on our instructions, under the Cloudflare Customer DPA

Data Location

🌍 Global edge network — requests are served from the nearest Cloudflare data centre, usually but not necessarily in the EU. We do not claim EU-only localisation for this traffic; transfers rely on Cloudflare's standard contractual clauses.

Purpose

CDN, DDoS protection, web application firewall, TLS, the edge worker that injects our content-security policy, Cloudflare Turnstile (the anti-bot check on sign-up, log-in and password reset) and Cloudflare Web Analytics

Data Processed

Web traffic data, IP addresses and request metadata. When you pass a Turnstile check, our own server sends your IP address to Cloudflare along with the challenge token in order to verify it — that transmission is ours, not just passing edge traffic.

Service Provider

Mistral AI (France)

Role: processor acting on our instructions. No separate DPA is linked on this page.

Data Location

🇫🇷 France (company establishment) — we call Mistral's api.mistral.ai endpoint and have not verified the region in which it processes requests

Purpose

All of our AI features: page assistance in the browser extension, fiscal explanations, the plain-language explanation of a situation you describe, legal explanations, the nightly drafting of our legal sheets, and the legal-intelligence and MCP endpoints

Data Processed

The question you type, exactly as written; the free-text description of your situation when a feature asks for one; and, when page assistance is on, the visible text of the government page you are viewing — headings and paragraphs, including those of a signed-in account

Service Provider

Google LLC

Role: processor acting on our instructions, under the Google Cloud DPA

Data Location

🌍 Google's global translation endpoint — we have not pinned it to a region

Purpose

The Translate to French button offered next to free-text fields in the rental, letter and home-employment document forms

Data Processed

The contents of the field you choose to translate, up to 2,000 characters per request — whatever you have written there, including anything personal

Service Provider

Google LLC

Role: processor acting on our instructions, under the Google Cloud DPA

Data Location

🌍 Google's global speech-synthesis endpoint — we have not pinned it to a region

Purpose

The Read aloud button in the browser extension, which speaks the assistance text shown on screen

Data Processed

The text to be spoken and the language requested

Service Provider

Stripe, Inc.

Role: processor for the payment operations we instruct; Stripe's own terms describe it as an independent controller for fraud prevention and for its regulatory obligations

Data Location

🌍 Global — Stripe describes international processing; we have not confirmed an EU-only residency setting on our account

Purpose

Checkout, subscription billing and payment processing on the web. In-app purchases do not go through Stripe — see Apple App Store / Google Play below.

Data Processed

Payment and billing details and transaction history, plus what we attach to a checkout session: the property address for rental packs, Google Analytics client and session identifiers with campaign (UTM) parameters, and, for home-employment packs, the gross salary figures used to price the pack

Service Provider

Openapi Srl (Italy) — electronic signature service

Role: processor for sending the document and collecting the signature; controller for the signature evidence it keeps under its own responsibility

Data Location

🇮🇹 Italy (company establishment) — we have not verified where the signature service itself is hosted

Purpose

Electronic signature of rental contracts, cross-border presence and leaver attestations, and home-employment documents

Data Processed

Signer names and e-mail addresses, and the PDF to be signed with everything in it. For a cross-border attestation this includes the name and e-mail address of your Swiss employer's signatory.

Service Provider

Brevo (France)

Role: processor acting on our instructions

Data Location

🇫🇷 France (company establishment) — we have not verified where Brevo's own sub-processors operate

Purpose

All the e-mail we send: account verification and password reset, purchase confirmations, monthly digests, lifecycle and re-engagement messages, review requests, rent, obligation, lease-expiry and follow-up reminders, tenant messages, home-employment invitations, vault share links, and occasional messages we send to users from our admin panel

Data Processed

Your e-mail address, your name, and the content of the message — including any document link it carries

Service Provider

Functional Software, Inc. (Sentry)

Role: processor acting on our instructions

Data Location

🇪🇺 EU region (Germany) — the browser security reports go to Sentry's German ingest host

Purpose

Error tracking and debugging, plus the content-security-policy violation reports your browser sends directly

Data Processed

Error stack traces, browser and device information, page URLs, IP address, masked session replays, CSP violation reports, and error and performance reports from our servers (never the content of a request since 18 September 2026)

Service Provider

Google Ireland Ltd / Google LLC

Role: processor for Google Analytics under Google's Analytics terms; Google acts under its own responsibility for any advertising use of the data

Data Location

🌍 Global (Google LLC, US)

Purpose

Website audience analytics and tag management. Neither Tag Manager nor GA4 is requested until you accept analytics or marketing cookies — measured on 17 September 2026.

Data Processed

Online identifiers (cookie / client ID), pages viewed, approximate location, device and browser information and, when you are signed in, your AdminLanding account identifier — which makes this data pseudonymous, not anonymous

Service Provider

Microsoft Corporation

Role: independent controller — Microsoft states that it acts as a data controller for Clarity, so this is not a sub-processing relationship

Data Location

🌍 Global (Microsoft) — we have not verified where Clarity stores the recordings

Purpose

Heat maps and session recordings of the public website, so we can see where pages confuse or fail visitors

Data Processed

Pages viewed, clicks, scrolling and mouse movement, device and browser information, approximate location, and a recording of the page as it was rendered. The signed-in app shells and the authentication screens (log in, sign up, verify e-mail, delete account) are marked so their content is not uploaded; public marketing pages are recorded as they appear. Clarity is never started on a /share/ link, and is stopped if you navigate to one.

Service Provider

Google LLC

Role: processor acting on our instructions, under the Google Cloud / Firebase terms

Data Location

🌍 EU / Global (Google)

Purpose

Usage analytics and crash diagnostics in our three mobile apps: Guide: Démarches en France, Rent — Bail & Courte Durée, and Net Frontalier

Data Processed

App-usage identifier, your AdminLanding account identifier where the app has accounts, device and OS information, the Android advertising ID, and crash logs

Service Provider

Expo, Inc. (US)

Role: processor acting on our instructions. No separate DPA is linked on this page.

Data Location

🌍 United States — we have not verified the transfer mechanism Expo relies on

Purpose

Over-the-air updates for all three apps — each app contacts Expo at launch to check for one — and delivery of the push notifications you enable in the Rent app. Guide's reminders are scheduled on the device and do not pass through Expo.

Data Processed

On every update check: device and runtime information and your IP address, before any consent choice and whether or not you use notifications. For push: the device push token and the notification body, which can contain a tenant's name, a property address, a lease end date or an arrears amount — never the contents of your documents.

Service Provider

Apple Inc. / Google LLC

Role: Apple and Google sell in-app purchases as merchants of record, under their own responsibility. They are not our processors for the sale.

Data Location

🌍 Global

Purpose

In-app purchases: AI credit packs in the Guide app; rental packs, e-signature credit packs and the tenant portal in the Rent app

Data Processed

Store purchase receipt and transaction identifier

Service Provider

Meta Platforms Ireland Limited

Role: Meta's Business Tools terms describe this measurement partly as joint controllership with us and partly as Meta's own controller processing — not plain sub-processing

Data Location

🌍 EU / US (EU-US Data Privacy Framework + SCCs)

Purpose

Measuring the performance of our own ad campaigns on Facebook and Instagram — website pixel, and app-install / conversion measurement for the Rent mobile app. No ads are shown inside our products.

Data Processed

Web: online identifiers (cookie) and conversion events — only after marketing consent. Mobile: app events (e.g. account created, pack purchased) — only after in-app analytics consent. iOS installs: aggregated, anonymous SKAdNetwork data only.

Service Provider

DILA — French government legal-information service

Role: a French public administration publishing open data. It is not our sub-processor.

Data Location

🇫🇷 France

Purpose

Fetching the official text of the specific articles cited in our own content registry

Data Processed

The identifier of the article being fetched. The request is made by our server and carries nothing about you: no user-facing search sends your search terms to this API.

Service Provider

api-adresse.data.gouv.fr · geo.api.gouv.fr · api3.geo.admin.ch

Role: French public open-data services and the Swiss federal geoportal (swisstopo). They are not our sub-processors.

Data Location

🇫🇷 France · 🇨🇭 Switzerland

Purpose

Address autocomplete and postcode-to-town lookup in our forms, including two public pages

Data Processed

The address text as you type it, sent from your browser directly to these services together with your IP address — no account identifier, and no cookie prompt beforehand. In the cross-border tools the Swiss lookup is made by our server rather than your browser.