Sub-processors
Last updated: 1 July 2026
PropertyOS uses the third-party providers below to deliver the service. Each
processes personal data only on our instructions, under a data-processing
agreement, and with appropriate safeguards. We notify customers of material
changes via the in-app changelog or by email where required.
| Sub-processor | Purpose | Data location |
|---|---|---|
| Contabo GmbH (Germany) | VPS hosting — application server, SQL Server database, server log files, background jobs, and self-hosted malware scanning (ClamAV) for uploaded files | Data centre in Lauterbourg, France (EU) |
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | Blob storage for uploaded documents; Azure Communication Services for transactional email; Application Insights for operational monitoring | EU regions |
| Microsoft Azure OpenAI Service | Optional AI assistance (only the text you submit to AI features) | EU region |
| Stripe Payments Europe, Ltd. (Ireland) | Subscription billing and payment processing; card data is handled by Stripe and not stored by us | EU, with onward transfers under Standard Contractual Clauses |
| Google Ireland Ltd. | Optional Google Sign-In (OAuth) for users who choose it; Firebase Cloud Messaging as the browser push-delivery service on Chrome/Android | EU, with onward transfers under Standard Contractual Clauses |
| Browser push services (Mozilla, Apple) | Delivery of web-push notifications on Firefox/Safari when a user opts in | Determined by the user's browser vendor |
| Microsoft Azure Maps (uses TomTom as a mapping data sub-processor) | Geocoding property addresses into map coordinates | EU |
Notes
- Stripe and Azure OpenAI apply only if billing and AI features are
enabled for your account.
- Google Sign-In and browser push notifications apply only when a user
actively chooses them.
- Geocoding sends only a property address (not tenant identities) to obtain
coordinates.
- Malware scanning happens on our own hosting infrastructure (Contabo), not a third-party
scanning service — uploaded file content is not shared with an additional recipient for this
purpose.
For a signed Data Processing Agreement, or questions about sub-processors,
contact [email protected].