Time Subprocessors
This page lists the external providers used for Time & Bill and the landing site in plain language.
| Provider | Purpose | Data category | Required or optional | Notes |
|---|---|---|---|---|
| Stripe | Payments, subscriptions, invoices and customer portal | Account email, internal account reference, plan, billing and payment information, payment and subscription status | Used for paid subscriptions; no payment details required for the trial | Processor or independent controller, depending on the activity. International processing is possible. Privacy |
| Hetzner | Core application, primary database and self-operated diagnostics | Project, time and account data and filtered diagnostics | Required for the hosted product | Primary application location Germany; other storage locations are explained below and under AWS |
| AWS | System email, file storage, backups, landing page and optional iPhone push delivery | Recipients and email content, profile pictures, company logos, encrypted database/file backups, delivery tokens and generic push content | Required for operation; phone notifications are optional | S3 files, backups, SES and the iPhone push application use Ireland. Contractual and international-transfer safeguards apply in addition to the chosen storage location. |
| Apple | Optional iPhone notifications through APNs | delivery tokens, generic notification payloads and delivery information | Optional, when phone notifications are enabled | Used for iPhone notification delivery |
| Optional Android notifications through FCM | installation identifiers, delivery tokens, SDK/device metadata and generic notification payloads | Optional, when phone notifications are enabled on Android | Used for Android notification delivery; no Firebase Analytics |
Why these providers are used
This overview includes providers with different privacy roles. Stripe does not act as a subprocessor for every activity. The privacy policy explains payment handling and Stripe’s roles.
- Hetzner is used to host the core application in Germany.
- AWS is used for email delivery and the landing page.
- Error monitoring is operated by Grobmeier Solutions using self-hosted GlitchTip on Hetzner infrastructure in Germany. Sentry-compatible SDKs send filtered diagnostics to this service; Sentry is not used as a hosted monitoring provider.
- Newsletter subscriber management is operated by Grobmeier Solutions using self-hosted Listmonk software on the Time & Bill infrastructure; newsletter delivery uses AWS SES.
More detail
An encrypted Borg backup is also stored on a Hetzner Storage Box.