The providers we engage, where they process data and the safeguards in place.
Some company details in this document are still being completed and are marked as such.
PPS — Practical Programming Systems engages the service providers below to operate PPS ERP. Each one is bound by a written data processing agreement with obligations equivalent to our Data Processing Agreement. We inform customers at least 30 days before adding or replacing a sub-processor that processes customer personal data, by email to the account administrators and by notification in the application. Customers may object within that period as described in the DPA.
| Provider | Service | Data processed | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Railway Corporation | Application hosting, databases, background workers | All data stored in the platform | European Union (EU/EEA) (primary region); provider established in the United States | EU Standard Contractual Clauses |
| Cloudflare, Inc. | DNS, TLS, content delivery, DDoS and bot protection (incl. Turnstile), object storage for uploaded files (R2) | IP addresses, request metadata, uploaded files | Global network; stored files in the EU where configured | EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses |
| Plus Five Five, Inc. (Resend) | Delivery of service and marketing emails | Recipient name and email, email content, delivery status | United States | EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Subscription payments, payment method storage, invoicing support | Billing contact, company and VAT details, payment data (cards are entered directly at Stripe) | European Union; United States for group processing | EU Standard Contractual Clauses; EU–U.S. Data Privacy Framework |
| Amazon Web Services EMEA SARL | Message queue receiving Amazon marketplace notifications (only for customers who connect Amazon) | Order notification metadata | EU (Ireland, eu-west-1) | Processing in the EU; EU Standard Contractual Clauses for any access from outside |
| Provider | Service | Data processed | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Google Ireland Limited | "Continue with Google" sign-in | Name, email, Google account ID | EU; United States | EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses |
These providers are used only on our public website and only after a visitor consents. They do not process customer data from PPS ERP.
| Provider | Service | Processing location | Transfer safeguard |
|---|---|---|---|
| Google Ireland Limited | Google Analytics 4, Google Ads conversion measurement | EU; United States | EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses |
Marketplaces and sales channels such as bol.com, Amazon and Shopify, and any other external system a customer connects, are chosen and contracted by the customer. Data exchanged with them is processed under the customer's own agreement with that platform. They are not sub-processors of PPS — Practical Programming Systems.
Contact info@ppserp.com for questions about this list or for a copy of the relevant safeguards.
Questions about this policy?
Contact us at info@ppserp.com.