Subprocessors
Last updated: 16 August 2026.
Scope
This page lists subprocessors that Negative Epsilon SL may use to process personal data contained in Client Data when providing FiscalRail. Capitalised terms have the meaning in the Data processing addendum.
Current subprocessors
- Hetzner Online GmbH — cloud compute, networking and database infrastructure — processing location: Germany.
- Cloudflare, Inc. and relevant affiliates — R2 object storage for invoice logos and generated invoice files — configured processing location: European Union.
- Amazon Web Services EMEA SARL and relevant affiliates — Amazon Simple Email Service for transactional email — primary configured region: EU (Frankfurt); support and transfer access may occur as described in AWS’s data-processing terms.
Services that are not Client-Data subprocessors
Stripe receives FiscalRail account and billing data for payment processing, but FiscalRail does not send invoice-customer data to Stripe. Stripe’s role for those payment activities is described in the Privacy policy.
AEAT, VIES and other tax authorities or official validation services receive data only when a Client uses the relevant feature. They act under their own public tasks and legal frameworks and are not FiscalRail subprocessors. Client-configured webhook endpoints and integrations are also not our subprocessors.
Changes
We will update this page before appointing a new Client-Data subprocessor and provide the notice required by the DPA. Clients should keep their account contact details current. Objections must follow the DPA and identify reasonable data-protection grounds.
Contact
Questions about subprocessors or transfer safeguards may be sent to contact@negativeepsilon.com.