Subprocessors
Last updated: May 9, 2026
1. Overview
Daak Harkara LLC operates the majority of its infrastructure in-house. This page lists the third-party service providers ("subprocessors") that may process personal data on our behalf in the course of providing our products. We maintain this list in compliance with Article 28 of the EU General Data Protection Regulation (GDPR) and equivalent provisions in other jurisdictions.
All subprocessors operate under written agreements that bind them to confidentiality, security, and processing limitations consistent with our Privacy Policy and our customer Data Processing Agreement.
2. Current Subprocessors
| Provider | Purpose | Location | Data processed | Applies to |
|---|---|---|---|---|
| Contabo GmbH | Cloud infrastructure and server hosting | Germany (EU) | All customer data at rest and in transit through our application servers, databases, and object storage | All products |
| Stripe, Inc. | Payment processing for paid plans | United States (with EU presence) | Billing email, payment-method tokens, transaction metadata. Card numbers never touch our systems. | All paid products |
| Cloudflare, Inc. | DNS, CDN, and DDoS protection | United States (global edge) | IP address, request metadata, TLS connection data | Public-facing websites |
| Namecheap, Inc. | Domain name registration and DNS hosting | United States | Domain registration WHOIS information for daakharkara.com and related domains. No customer data. | All products (infrastructure only) |
The list above reflects active subprocessors at the date shown at the top of this page.
3. In-House Services
The following components are operated by Daak Harkara LLC on our own dedicated infrastructure and are not subprocessors:
- Application servers and APIs (Go services)
- PostgreSQL databases (per-product, dedicated)
- Redis caches and message queues
- Object storage (MinIO, S3-compatible)
- Outbound email infrastructure (Postfix, Dovecot, DKIM signing)
- Logging, metrics, and monitoring (Prometheus, Grafana, InfluxDB)
We chose this architecture deliberately to keep customer data under our direct control and minimize the surface area of third-party processors.
4. International Data Transfers
Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to a country not recognized as providing an adequate level of data protection, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK and Swiss addenda. Our DPA incorporates these by reference.
5. Notification of Changes
We will update this page whenever we add, remove, or materially change a subprocessor. Customers who have signed a Data Processing Agreement with us can subscribe to advance notifications by emailing legal@daakharkara.com with the subject "Subprocessor notifications". We provide at least 14 days' advance notice before activating a new subprocessor and a reasonable objection mechanism as described in our DPA.
6. Contact
Questions about our subprocessors or data transfers:
Daak Harkara LLC
30 N Gould St #32975, Sheridan, WY 82801, USA