Legal
Sub-processors
Last updated: 15 May 2026
About this page
This page lists the third-party sub-processors Kapsule Group Limited ("Kapsule Cloud") currently engages to process personal information on behalf of our customers. It is maintained in accordance with clause 5 of the Data Processing Agreement.
We will notify you of any addition or material change to this list at least thirty (30) days before the new sub-processor begins processing. Notification is by email to your account address and by update to this page.
To receive email notifications of sub-processor changes, send a request to [email protected] with the subject line "Sub-processor notifications".
Current sub-processors
| Sub-processor | Purpose | Primary location |
|---|---|---|
| Hetzner Online GmbH | Server infrastructure: all customer sites, databases, and email are hosted on Hetzner dedicated and cloud servers | Germany (EU) |
| Cloudflare, Inc. | CDN, DDoS protection, WAF, DNS, and R2 object storage (encrypted off-site backups stored in Oceania region) | United States |
| Stripe, Inc. | Payment processing and subscription billing | United States |
| Openprovider B.V. | Domain registration, renewal, and DNS management | Netherlands (EU) |
| Migadu | Transactional and outbound email delivery (e.g. account notifications, password resets) | Switzerland |
| Mailcow (self-hosted) | Email hosting platform: IMAP, SMTP, and webmail for customer email accounts (hosted on Hetzner infrastructure) | Germany (EU) |
| Amazon Web Services: SES | Supplementary transactional email delivery | United States |
| Anthropic, PBC | Large language model API powering Kora, our AI customer-support assistant | United States |
| Mem0 | Short-term conversation memory for Kora to maintain context across a support session | United States |
| Langfuse | AI quality monitoring, accuracy tracking, and safety observability for Kora | Germany (EU) |
| Sentry (Functional Software, Inc.) | Error tracking and application performance monitoring | United States |
| GitHub (Microsoft Corporation) | Source code hosting and automated daily backups of the Kapsule Cloud platform codebase | United States |
International transfers
Some sub-processors are located outside New Zealand. Where personal information is transferred internationally, we ensure comparable safeguards apply as described in clause 9 of the Data Processing Agreement and clause 7 of the Privacy Policy.
Sub-processors in the European Union or Switzerland are subject to the GDPR or a comparable privacy framework. Sub-processors in the United States are subject to contractual safeguards, including by reference to Standard Contractual Clauses where appropriate.
Changes to this list
We will update this page when sub-processors are added, removed, or their details change materially. We will notify customers by email at least 30 days before a new sub-processor begins processing Customer Personal Information.
If you have concerns about a sub-processor, please email [email protected].